Skype for Business Online SIP URI Define or Change for Office 365 Online User

-
How is the SIP URI defined in Skype for Business Online?

Can the SIP URI be changed? - Yes!

I ran into an issue today, where we have registered an additional DNS Domain with the customer Office 365 tenant.
Problem was, the UPN and EMAIL address was still @xx.onmicrosoft.com

It was necessary changing the SIP address to the new domain.

the User had:
sip:      user@xx.onmicrosoft.com
email   user@xx.onmicrosoft.com
UPN    user@xx.onmicrosoft.com

but we need to change actually only the SIP address to user@newdomain.com

the command
Set-CsUser -identity user -SipAddress sip:user@newdomain.com
is not working!

ERROR: Unable to set “SipAddress”. This parameter is restricted within Remote Tenant PowerShell.

see support statement: https://support.microsoft.com/en-us/kb/2909916

-------------------------------------------------------------------------

What is important in Office 365 AZURE AD?

First activation of the tenant defines the default domain as xx.onmicrosoft.com. where the UPN of user will be automatically : @xx.onmicrosoft.com

Once you add the original domain into the tenant and make it the default domain the user UPN (only those with @xx.onmicrosoft.com) will be automatically changed too the new default domain with an automated Office 365 internal batch run.

If you define multiple DNS domains, you only one default domain. This default domain is automatically suggested once you create an Office 365 user account.
If you like creating a new user with different UPN/ default domain, change it during the creation task at the top of the create new user wizard (or if via PowerShell, define the DNSdomain there)

Therefore remember the following:

  • UPN (User principal name/ login name) = SIP URI
  • SMTP address can be set different from UPN to any registered DNS tenant domain.

(Note:
Best Practice is UPN should be equal with the SIP URI and EMAIL address for best user experience)
 
If a users SIP address should be changed, you MUST change the users UPN.
to the domain/ username you want.

A)
do this graphically within the tenant admin center (users)

B) Use the PowerShell
Set-MsolUserPrincipalName 
              -UserPrincipalName user@xx.onmicrosoft.com 
              -NewUserPrincipalName user@newdomain.com

The user doesn't need to be disabled from any Office 365 service, rather changing the UPN will change the SIP address.
If you need to change the EMAIL/ SMTP address you can use the Admin Center or change it via PowerShell.


Note:
This article doesn't fully apply if you af DisSync/ AZURE AD Sync in place.
But the principles still apply in the same way.


Author:

Comments

Post a Comment

Popular posts from this blog

How to hide users from GAL if they are AD Connect synchronized

-
Image
How to hide and un-hide users from Global Address List (GAL) in Exchange Online if they are AD Connect synchronized Hiding User from GAL isn't possible if those are synchronized form On-Premises Active Directory. The local AD is the leading system for all important attributes, like SMTP, UPN and hiding from GAL. Especially during a cross-tenant migration, you do not want to see not migrated user in the GAL. Those User aren't actively working until their cut-over day. Since the Exchange Online attribute  msExchHideFromAddressList s is an AD on-premises parameter, we have two possible ways hiding user in BME from GAL.   Modify the AD Connect for your teant with a custom rule, by using a extensionAttribute to set the HidefromGAL. In this rule, for users which have an entry in the extensionAttribute, hiding / un-hiding will be controlled by AD Connect This is the best option for Cross-Tenant Migration, if you run 2 or more AD Connect system We direct modif...
Read more

Cannot join external Lync Meeting: Lync Edge Server Single IP Address (Lync Edge Server Single IP Web Conferenceing Problem)

-
Image
Lync Edge Server FQDN and IP PORTS (Version 1.2, Update 26.11.2014) As we all know, we can configure Lync Edge Server in several way. 1) Single Edge Server with a SINGLE IP ADDRESS 2) Single Edge Server with MULTIPLE IP ADDRESSES (3x IPs) 3) Multiple Edge Server in a Pool, with MULTIPLE IP ADDRESSES (Zx 3 IPs) Regardless what we are going to configure, there are common / well-known TCP Port necessary making Lync work, which are: Access: Port: 443 and 5061 Conferencing: Port: 443 and (444) AV: Port: 443 (I have not listed other ports, e.g. STUN or the dynamic port range. This is not required for the topic discussed here) External FQDN with single IP address: What can we see here? If we are going to choose a single IP address, we would have TCP Port overlapping. Therefore the only way avoiding this is assigning other ports. Additionally we will also see and are reminded that Lync highly depends on DNS. If we have single IP, we must have use single, uniqu...
Read more

MFA with Guest Access and different tenants settings

-
Image
There is an update regarding MFA Multi Factor Authentication. If you are guest with a different Tenant, the MFA Settings are now reflecting the settings of all tenants in a different way. Each MFA setting is reflected and you can setup your MFA device as per tenant and the admin settings allow. Login to your Profile in Office 365/ Azure AD: https://account.activedirectory.windowsazure.com/r/#/profile or https://myapps.microsoft.com Go to your PROFILE: Sign in to https://myapps.microsoft.com Select your account name in the top right, then select profile. Select Additional security verification. If might be happen, your admin hast configured MFA, so you wouldn't see this menu. Simply switch the tenant to the guest tenant where you need to configure MFA. Once you go back to your profile and you will find the MFA device and other settings a usual:
Read more