立即与支持人员聊天
与支持团队交流

Active Roles 7.6.1 - Solutions Guide

Active Roles Solutions Overview Exchange Resource Forest Management Configuration Transfer Wizard Solution Active Roles SPML Provider Skype for Business Server Solution
Introducing Skype for Business Server User Management Supported Active Directory topologies User Management policy Master Account Management policy Access Templates for Skype for Business Server Deploying the Solution Managing Skype for Business Server Users
Management Pack for SCOM

Default description for new shadow accounts

The Master Account Management policy allows you to specify a text to use as the default description for new shadow accounts that Active Roles creates when enabling master accounts for Skype for Business Server. Active Roles writes that text to the Description property of every new shadow account.

Attribute to store a reference to shadow account

By default, the Master Account Management policy designates the adminDescription attribute of the master account for storing the GUID of the shadow account, and allows you to choose a different attribute for that purpose. Skype for Business Server User Management uses this attribute to identify the shadow account in the Skype for Business Server forest when managing a given master account in an external forest. The policy causes Active Roles to set this attribute on the master account when linking the master account to the shadow account in the Skype for Business Server forest.

Synchronized properties

The Master Account Management policy defines a list of properties to copy from the master account to the shadow account. These properties are referred to as synchronized properties. When you use Active Roles to set or change a synchronized property of a master account, the policy causes Active Roles to set or change the value of that property on both the master account and shadow account.

In addition, Skype for Business Server User Management provides a scheduled task that copies synchronized properties from every managed master account to the corresponding shadow account. The task runs on a scheduled basis to ensure that each of the synchronized properties of the shadow account has the same value as the corresponding property of the master account. If a synchronized property of the shadow account has changed for whatever reason, Active Roles changes that property back to the value found on the master account. For further details, see Scheduled synchronization later in this document.

The following table provides the default list of synchronized properties. You can configure the policy to synchronize additional properties or remove individual properties from synchronization.

Table 18: Default list of synchronized properties

c (Country Abbreviation)

co (Country)

company (Company)

countryCode (Country-Code)

department (Department)

displayName (Display Name)

givenName (First Name)

homePhone (Home Phone)

initials (Initials)

l (City)

mobile (Mobile Number)

otherTelephone (Phone Number (Others))

physicalDeliveryOfficeName (Office Location)

postalCode (ZIP/Postal Code)

postOfficeBox (Post Office Box)

sAMAccountName (Logon Name (pre-Windows 2000))

sn (Last Name)

st (State/Province)

streetAddress (Street Address)

telephoneNumber (Telephone Number)

title (Job Title)

url (Web Page Address (Others))

wWWHomePage (Web Page Address)

 

Substituted properties

The Master Account Management policy defines a list of properties that appear on the master account but reflect the properties of the shadow account. These properties are referred to as substituted properties. When you use Active Roles to view properties of a master account, the policy causes Active Roles to retrieve the values of the master account’s substituted properties from the shadow account. When you use Active Roles to set or change a substituted property of a master account, the policy causes Active Roles to set or change the value of that property on the shadow account.

The policy does not allow you to narrow down the list of substituted properties. However, you can specify your custom list of substituted properties in addition to the default list. If you do so, the resulting list of substituted properties includes all properties from both the default list and your custom list.

Table 19: Default list of substituted properties

edsva-Skype for Business-AccountExists

edsva-Skype for Business-ArchivingPolicy

edsva-Skype for Business-ClientPolicy

edsva-Skype for Business-ClientVersionPolicy

edsva-Skype for Business-ConferencingPolicy

edsva-Skype for Business-DialPlanPolicy

edsva-Skype for Business-Disable

edsva-Skype for Business-Enable

edsva-Skype for Business-ExchangeArchivingPolicy

edsva-Skype for Business-ExternalAccessPolicy

edsva-Skype for Business-HostedVoiceMail

edsva-Skype for Business-IsEnabled

edsva-Skype for Business-LineServerURI

edsva-Skype for Business-LineURI

edsva-Skype for Business-LocationPolicy

edsva-Skype for Business-MasterAccount

edsva-Skype for Business-MobilityPolicy

edsva-Skype for Business-Move

edsva-Skype for Business-MoveTargetRegistrarPool

edsva-Skype for Business-PersistentChatPolicy

edsva-Skype for Business-PIN

edsva-Skype for Business-PINPolicy

edsva-Skype for Business-PrivateLine

edsva-Skype for Business-ReEnable

edsva-Skype for Business-RegistrarPool

edsva-Skype for Business-SIPAddress

edsva-Skype for Business-SIPAddressType

edsva-Skype for Business-SIPDomain

edsva-Skype for Business-SIPUserName

edsva-Skype for Business-TasksAllowed

edsva-Skype for Business-TelephonyOption

edsva-Skype for Business-TemporarilyDisable

edsva-Skype for Business-VoicePolicy

 

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级