By default, the policy designates the adminDescription attribute of the master account to store the GUID of the shadow account. However, you can select a different attribute if needed.
The Skype for Business Server User Management feature uses this attribute to identify the shadow account (and, consequently, the linked mailbox) when managing a specific master account. The policy causes Active Roles to set this attribute on the master account when creating the linked mailbox.
The Master Account Management policy defines a list of properties to copy from the Skype for Business Server master account to the shadow account. These properties are referred to as "synchronized properties". When you use Active Roles to set or change a synchronized property of a master account, the policy causes Active Roles to set or change the value of that property on both the master account and the shadow account.
In addition, Skype for Business Server User Management provides a scheduled task that copies synchronized properties from every managed master account to the corresponding shadow account. The task runs on a scheduled basis to ensure that each of the synchronized properties of the shadow account has the same value as the corresponding property of the master account. If a synchronized property of the shadow account has changed for whatever reason, Active Roles changes that property back to the value found on the master account. For more details, see Scheduled Skype for Business Server synchronization.
The default list of synchronized properties are as follows:
-
c (Country Abbreviation)
-
co (Country)
-
company (Company)
-
countryCode (Country-Code)
-
department (Department)
-
displayName (Display Name)
-
givenName (First Name)
-
homePhone (Home Phone)
-
initials (Initials)
-
l (City)
-
mobile (Mobile Number)
-
otherTelephone (Phone Number (Others))
-
physicalDeliveryOfficeName (Office Location)
-
postalCode (ZIP/Postal Code)
-
postOfficeBox (Post Office Box)
-
sAMAccountName (Logon Name (pre-Windows 2000))
-
sn (Last Name)
-
st (State/Province)
-
streetAddress (Street Address)
-
telephoneNumber (Telephone Number)
-
title (Job Title)
-
url (Web Page Address (Others))
-
wWWHomePage (Web Page Address)
TIP: You can configure the policy to either synchronize additional properties or remove individual properties from synchronization.
The Master Account Management policy defines a list of properties that appear on the Skype for Business Server master account but reflect the properties of the shadow account. These properties are referred to as substituted properties. When you use Active Roles to view properties of a master account, the policy causes Active Roles to retrieve the values of the substituted properties of the master account from the shadow account. When you use Active Roles to set or change a substituted property of a master account, the policy causes Active Roles to set or change the value of that property on the shadow account.
The Skype for Business Server substituted properties include the following:
-
edsva-Skype for Business-AccountExists
-
edsva-Skype for Business-ArchivingPolicy
-
edsva-Skype for Business-ClientPolicy
-
edsva-Skype for Business-ClientVersionPolicy
-
edsva-Skype for Business-ConferencingPolicy
-
edsva-Skype for Business-DialPlanPolicy
-
edsva-Skype for Business-Disable
-
edsva-Skype for Business-Enable
-
edsva-Skype for Business-ExchangeArchivingPolicy
-
edsva-Skype for Business-ExternalAccessPolicy
-
edsva-Skype for Business-HostedVoiceMail
-
edsva-Skype for Business-IsEnabled
-
edsva-Skype for Business-LineServerURI
-
edsva-Skype for Business-LineURI
-
edsva-Skype for Business-LocationPolicy
-
edsva-Skype for Business-MasterAccount
-
edsva-Skype for Business-MobilityPolicy
-
edsva-Skype for Business-Move
-
edsva-Skype for Business-MoveTargetRegistrarPool
-
edsva-Skype for Business-PersistentChatPolicy
-
edsva-Skype for Business-PIN
-
edsva-Skype for Business-PINPolicy
-
edsva-Skype for Business-PrivateLine
-
edsva-Skype for Business-ReEnable
-
edsva-Skype for Business-RegistrarPool
-
edsva-Skype for Business-SIPAddress
-
edsva-Skype for Business-SIPAddressType
-
edsva-Skype for Business-SIPDomain
-
edsva-Skype for Business-SIPUserName
-
edsva-Skype for Business-TasksAllowed
-
edsva-Skype for Business-TelephonyOption
-
edsva-Skype for Business-TemporarilyDisable
-
edsva-Skype for Business-VoicePolicy
NOTE: You cannot remove properties from the default list of substituted properties. However, you can create your custom list of substituted Skype for Business Server properties in addition to the default list. If you do so, the resulting list of substituted properties includes all properties from both the default list and your custom list.
The Master Account Management policy also defines a list of Skype for Business Server properties to copy from the shadow account to the master account. By default, the list is empty. If you add a property to that list, the policy ensures that any changes to that property on the shadow account will be replicated to the master account.