Share via

Migrating Lync Online users to Lync on-premises in Lync Server 2013

  • Article

 

Topic Last Modified: 2015-11-13

Important

These steps are necessary only for migrating user accounts that were originally enabled for Lync in Lync Online, before you deployed Lync on-premises. To move users who were originally enabled for Lync on-premises, then later moved to Lync Online, see Administering users in a hybrid Lync Server 2013 deployment.
Additionally, all users being moved must have accounts in the on-premises Active Directory.

Migrating User Accounts Originally Enabled in Lync Online to Lync On-Premises

  1. First, make sure that your organization is configured for hybrid.

  2. Confirm that, on your on-premises Edge Servers, you have the certificate chain that enables connection to Lync Online, as shown in the following table. You can download this chain here: https://support.office.com/article/office-365-certificate-chains-0c03e6b3-e73f-4316-9e2b-bf4091ae96bb

    Certificate Certificate Store

    Baltimore CyberTrust Root

    Trusted Root CA

    Microsoft Internet Authority (New CA certificate)

    Intermediate CA

    MSIT Machine Auth CA2 (New Issuing CA2)

    Intermediate CA

  3. In your on-premises Active Directory, enable the affected user accounts for Lync on-premises. You can do this for an individual user by typing the following cmdlet:

    Enable-CsUser
-Identity "username" 
-SipAddress "sip: username@contoso.com"
-HostingProviderProxyFqdn "sipfed.online.lync.com"

    Or you can create a script that reads user names from a file and provides them as input to the Enable-CsUser cmdlet:

    Enable-CsUser
-Identity $Identity 
-SipAddress $SipAddress 
-HostingProviderProxyFqdn "sipfed.online.lync.com"

  4. Run DirSync to sync the Lync Online users with the updated Lync on-premises users.

  5. Update some DNS records to direct all SIP traffic to Lync on-premises:

    • Update the lyncdiscover.contoso.com A record to point to the FQDN of the on-premises reverse proxy server.

    • Update the _sip._tls.contoso.com SRV record to resolve to the public IP or VIP address of the Access Edge service of Lync on-premises.

    • Update the _sipfederationtls._tcp.contoso.com SRV record to resolve to the public IP or VIP address of the Access Edge service of Lync on-premises.

    • If your organization uses split DNS (sometimes called “split-brain DNS”), make sure that users resolving names through the internal DNS zone are directed to the Front End Pool.

  6. Type the Get-CsUser cmdlet to check some properties about the users you’ll be moving. You want to make sure that the HostingProviderProxyFQDN is set to "sipfed.online.lync.com" and that the SIP addresses are set correctly.

  7. Move Lync Online users to Lync on-premises.

    To move a single user, type this:

    $cred = Get-Credential

    Move-CsUser -Identity <username>@contoso.com -Target "<fe-pool>.contoso.com" -Credential $cred -HostedMigrationOverrideURL <URL>

    You can move multiple users by using the Get-CsUSer cmdlet with the –Filter parameter to select the users with a specific property. For example, you could select all Lync Online users by filtering for {Hosting Provider –eq “sipfed.online.lync.om”}. You can then pipe the returned users to the Move-CsUSer cmdlet, as shown below.

    Get-CsUser -Filter {Hosting Provider -eq "sipfed.online.lync.com"} | Move-CsUser -Target "<fe-pool>.contoso.com" -Credential $creds -HostedMigrationOverrideURL <URL>

    The format of the URL specified for the HostedMigrationOverrideUrl parameter must be the URL to the pool where the Hosted Migration service is running, in the following format: Https://<Pool FQDN>/HostedMigration/hostedmigrationService.svc.

    You can determine the URL to the Hosted Migration Service by viewing the URL for the Lync Online Control Panel for your Microsoft 365 or Office 365 organization account.

    To determine the Hosted Migration Service URL for your organizaton

    1. Log in to your Microsoft 365 or Office 365 organization as an administrator.

    2. Open the Lync admin center.

    3. With the Lync admin center displayed, select and copy the URL in the address bar up to lync.com. An example URL looks similar to the following:

      https://webdir0a.online.lync.com/lscp/?language=en-US&tenantID=

    4. Replace webdir in the URL with admin, resulting in the following:

      https://admin0a.online.lync.com

    5. Append the following string to the URL: /HostedMigration/hostedmigrationservice.svc.

      The resulting URL, which is the value of the HostedMigrationOverrideUrl, should look like the following:

      https://admin0a.online.lync.com/HostedMigration/hostedmigrationservice.svc

    Note

    The default maximum size for transaction log files of the rtcxds database is 16 GB. This might not be big enough if you’re moving a large number of users at once, especially if you have mirroring enabled. To get around this you can increase the file size or back up the log files regularly. For more information, see https://support.microsoft.com/kb/2756725.

  8. This is an optional step. If you need to integrate with Exchange 2013 Online, you need to use an additional hosting provider. For details, see Configuring on-premises Lync Server 2013 integration with Exchange Online.

  9. The users are now moved. To check that a user has correct values for the attributes shown in the following table, type this cmdlet:

    Get-CsUser | fl DisplayName,HostingProvider,SipAddress,Enabled
    Active Directory attribute Attribute name Correct value for Lync Online user Correct value for Lync on–premises users

    msRTCSIP-DeploymentLocator

    HostingProvider

    sipfed.online.lync.com

    SRV:

    msRTCSIP-PrimaryUserAddress

    SIPAddress

    sip:userName@contoso.com

    sip:userName@contoso.com

    msRTCSIP-UserEnabled

    Enabled

    True

    True

  10. Each user who has been moved will need to log out of Lync, then log back in. When they log in they should verify their contact lists, and add contacts if needed.

    Note that scheduled meetings are not migrated from Lync Online to Lync on-premises. Users will need to reschedule these meetings after being moved.

    After the DNS records are updated and all users are directed to On premise, the HostingProvider attribute directs the Lync user to either use SRV records or direct them to the Online provider “sipfed.online.lync.com.”