The Master Account Management policy defines a list of properties to copy from the master account to the shadow account. These properties are referred to as synchronized properties. When you use Active Roles to set or change a synchronized property of a master account, the policy causes Active Roles to set or change the value of that property on both the master account and shadow account.
In addition, Skype for Business Server User Management provides a scheduled task that copies synchronized properties from every managed master account to the corresponding shadow account. The task runs on a scheduled basis to ensure that each of the synchronized properties of the shadow account has the same value as the corresponding property of the master account. If a synchronized property of the shadow account has changed for whatever reason, Active Roles changes that property back to the value found on the master account. For further details, see Scheduled synchronization later in this document.
c (Country Abbreviation)
displayName (Display Name)
givenName (First Name)
homePhone (Home Phone)
mobile (Mobile Number)
otherTelephone (Phone Number (Others))
physicalDeliveryOfficeName (Office Location)
postalCode (ZIP/Postal Code)
postOfficeBox (Post Office Box)
sAMAccountName (Logon Name (pre-Windows 2000))
sn (Last Name)
streetAddress (Street Address)
telephoneNumber (Telephone Number)
title (Job Title)
url (Web Page Address (Others))
wWWHomePage (Web Page Address)
The Master Account Management policy defines a list of properties that appear on the master account but reflect the properties of the shadow account. These properties are referred to as substituted properties. When you use Active Roles to view properties of a master account, the policy causes Active Roles to retrieve the values of the master account’s substituted properties from the shadow account. When you use Active Roles to set or change a substituted property of a master account, the policy causes Active Roles to set or change the value of that property on the shadow account.
The policy does not allow you to narrow down the list of substituted properties. However, you can specify your custom list of substituted properties in addition to the default list. If you do so, the resulting list of substituted properties includes all properties from both the default list and your custom list.
edsva-Skype for Business-AccountExists
edsva-Skype for Business-ArchivingPolicy
edsva-Skype for Business-ClientPolicy
edsva-Skype for Business-ClientVersionPolicy
edsva-Skype for Business-ConferencingPolicy
edsva-Skype for Business-DialPlanPolicy
edsva-Skype for Business-Enable
edsva-Skype for Business-ExchangeArchivingPolicy
edsva-Skype for Business-ExternalAccessPolicy
edsva-Skype for Business-HostedVoiceMail
edsva-Skype for Business-IsEnabled
edsva-Skype for Business-LineServerURI
edsva-Skype for Business-LineURI
edsva-Skype for Business-LocationPolicy
edsva-Skype for Business-MasterAccount
edsva-Skype for Business-MobilityPolicy
edsva-Skype for Business-Move
edsva-Skype for Business-MoveTargetRegistrarPool
edsva-Skype for Business-PersistentChatPolicy
edsva-Skype for Business-PIN
edsva-Skype for Business-PINPolicy
edsva-Skype for Business-PrivateLine
edsva-Skype for Business-ReEnable
edsva-Skype for Business-RegistrarPool
edsva-Skype for Business-SIPAddress
edsva-Skype for Business-SIPAddressType
edsva-Skype for Business-SIPDomain
edsva-Skype for Business-SIPUserName
edsva-Skype for Business-TasksAllowed
edsva-Skype for Business-TelephonyOption
edsva-Skype for Business-TemporarilyDisable
edsva-Skype for Business-VoicePolicy
The Master Account Management policy defines a list of properties to copy from the shadow account to the master account. By default, the list is empty. If you add a property to that list, the policy ensures that any changes to that property on the shadow account are replicated to the master account.
Enable an existing Active Directory user for Skype for Business Server
Active Roles retrieves the properties of the existing user (in the external forest), and then performs the following actions:
If the user from the external forest already has a shadow account (for example, created by Exchange Resource Forest Management), then the policy re-uses the existing shadow account instead of creating a new one.
Modify Skype for Business Server user properties of a master account
If the change request includes any changes to substituted properties, Active Roles first makes the requested changes to the substituted properties of the shadow account. Next, Active Roles makes the requested changes to the properties of the master account, and then updates the synchronized properties of the shadow account with the new property values found on the master account.
Active Roles deprovisions the master account, and then temporarily disables the shadow account for Skype for Business Server.
Undeprovision a deprovisioned master account
Active Roles undeprovisions the master account and then re-enables the shadow account for Skype for Business Server.
For undeprovisioning master accounts to have an effect on shadow accounts, the container that holds deprovisioned master accounts must be in the scope of the Built-in Policy - Skype for Business - Master Account Management Policy Object (or a copy of that Policy Object).
Delete a master account
Active Roles deletes the master account, and then removes the shadow account from Skype for Business Server.
The Master Account Management policy requires that shadow accounts be in the scope of the User Management policy provided by Skype for Business Server User Management. This enables Active Roles to perform the Skype for Business Server related actions on the shadow account.