Skype for Business, How to create a role based account
How to create a role-based account for use with Skype for Business.
The first step in creating a role-based account is to create an Active Directory (AD) user in the department's Organizational Unit (OU). This will have to be done by someone who has been delegated OU Admin authority, typically the unit's IT Professional.
Creating the Account in AD
The following steps outline the process an IT Pro can follow to setup an account. There are other methods, such as using PowerShell, which are beyond the scope of this article.
- Start Active Directory Users and Computers.
- Make sure you are connected to ad.uillinois.edu domain.
- Navigate to the OU that you manage or sub-OU where you want to create the account. (Note: OU names should not contain protected characters such as "/" or "\")
- Right click in right hand window, choose New, then User
- Fill out the "New Object - User" window using the following guidelines:
- When choosing a User logon name, be sure to use something that cannot
be used as a person's NetID. The user login name for a role-based account should be longer than 8 and less then 20 characters long. Pick a naming scheme that is consistent and helps identify the purpose of the account.
- First name, Initials, and Last name are unimportant for this process, set them to whatever makes sense.
- Full name becomes the account's CN (object name displayed in ADUC). This should be the same as the User logon name and User logon name (pre-Windows 2000).
- User logon name is important. This is used as the login name for the account in Skype for Business. The domain following User login name should be @illinois.edu (or @uillinois.edu for UA units). This will become the account's UserPrincipleName in AD.
- User logon name (pre-Windows 2000) is also important. It MUST match the CN and User Logon Name. This will become the account's sAMAccountName.
- When choosing a User logon name, be sure to use something that cannot be used as a person's NetID. The user login name for a role-based account should be longer than 8 and less then 20 characters long. Pick a naming scheme that is consistent and helps identify the purpose of the account.
- Click next
- Create a strong password and choose the password options appropriate to your unit.
- Click next
- Click Finish
- After the account is created, open it (double-click; or right-click and choose Properties), and change the Display Name, which is what will be shown in Skype for Business or Exchange Address Book. Set this to something descriptive.
Exchange Enabling Accounts for Voice Mail
If the role-based account will have voice mail, send a request to firstname.lastname@example.org listing the User Logon Name created for the account and asking to have the account Exchange enabled.
All voice mail targets must be both Exchange and Skype for Business Enterprise Voice enabled. A Skype for Business account cannot receive voice mail without an Exchange Mailbox; and an Exchange Mailbox cannot receive voice mail without being enabled in Skype for Business.
Submitting the Request to Activate the Account in Skype for Business
After this account is created and enabled the unit's Pinnacle Department Manager (PDM) needs to submit a pinnacle request to finish activating this account. Instructions on how Pinnacle Department Managers can request a role-based account can be found in this document: Pinnacle, Requesting a New Role-Based Lync Account.