Preparing Active Directory Domain Services for Lync Server 2010

一. Running Schema Preparation

A. Using Setup to Run Schema Preparation

1. Log on to a server in your forest as a member of the Schema Admins group and with administrator rights on the schema master.

2. From the Lync Server 2010 installation folder or media, run Setup.exe to start the Deployment Wizard.

3. If you are prompted to install the Microsoft Visual C++ Redistributable, click Yes.

4. The Microsoft Lync Server 2010 Setup dialog box prompts you for a location to install the Lync Server 2010 files. Choose the default location or Browse to a location of your choice, and then click Install.

5. On the License Agreement page, check I accept the terms in the license agreement, and then click OK.

6. The installer installs the Lync Server 2010 Core Components.

7. When the Deployment Wizard is ready, click Prepare Active Directory, and then wait for the deployment state to be determined.

8. At Step 1: Prepare Schema, click Run.

9. On the Prepare Schema page, click Next.

10. On the Executing Commands page, look for Task status: Completed, and then click View Log.

11. Under the Action column, expand Schema Prep, look for the <Success> Execution Result at the end of each task to verify that schema preparation completed successfully, close the log, and then click Finish.

12. Wait for Active Directory replication to complete or force replication.

13. Manually verify that the schema changes replicated to all other domain controllers, as described in the following procedure.

B. To manually verify schema replication

1. Log on to a domain controller as a member of the Enterprise Admins group.

2. Open ADSI Edit by clicking Start, clicking Administrative Tools, and then clicking ADSI Edit.

3. In the Microsoft Management Console (MMC) tree, if it is not already selected, click ADSI Edit.

4. On the Action menu, click Connect to.

5. In the Connection Settings dialog box under Select a well known Naming Context, select Schema, and then click OK.

6. Under the schema container, search for CN=ms-RTC-SIP-SchemaVersion. If this object exists, and the value of the rangeUpper attribute is 1100 and the value of the rangeLower attribute is 14, then the schema was successfully updated and replicated. If this object does not exist or the values of the rangeUpper and rangeLower attributes are not as specified, then the schema was not modified or has not replicated.

二. Running Forest Preparation

A．To use Setup to prepare the forest

1. Log on to a computer that is joined to a domain as a member of the Enterprise Admins group for the forest root domain.

2. From the Microsoft Lync Server 2010 installation folder or media, run Setup.exe to start the Deployment Wizard.

3. Click Prepare Active Directory, and then wait for the deployment state to be determined.

4. At Step 3: Prepare Current Forest, click Run.

5. On the Prepare Forest page, click Next.

6. On the Executing Commands page, look for Task status: Completed, and then click View Log.

7. Under the Action column, expand Forest Prep, look for a <Success> Execution Result at the end of each task to verify that forest preparation completed successfully, close the log, and then click Finish.

8. Wait for Active Directory replication to complete, or force replication to all domain controllers listed in the Active Directory Sites and Services snap-in for the forest root domain controller, before running domain preparation. Force replication between the domain controllers in all Active Directory sites to cause replication within the sites to occur within minutes.

B． To verify that forest preparation was successful

1. Log on to a computer that is joined to a domain as a member of the Domain Admins group in the forest root domain.

2. Start the Lync Server Management Shell: Click Start, click All Programs, click Microsoft Lync Server 2010, and then click Lync Server Management Shell.

3. Run:

Get-CsAdForest

This cmdlet returns a value of LC_FORESTSETTINGS_STATE_READY if forest preparation was successful.

O:

三. Running Domain Preparation

A. To use Setup to prepare domains

1. Log on to any server in the domain as a member of the Domain Admins group.

2. From the Microsoft Lync Server 2010 installation folder or media, run Setup.exe to start the Lync Server Deployment Wizard.

3. Click Prepare Active Directory, and then wait for the deployment state to be determined.

4. At Step 5: Prepare Current Domain, click Run.

5. On the Prepare Domain page, click Next.

6. On the Executing Commands page, look for Task status: Completed, and then click View Log.

7. Under the Action column, expand Domain Prep, look for a <Success> Execution Result at the end of each task to verify that domain preparation completed successfully, close the log, and then click Finish.

8. Wait for Active Directory replication to complete or force replication to all the domain controllers listed in the Active Directory Sites and Services snap-in for the forest root domain controller.

B. To verify that domain preparation was successful

1. Log on to a computer that is joined to a domain and on which you have the appropriate administrator rights and permissions.

2. Open the Lync Server Management Shell console, and then run:

Get-CsAdDomain [-Domain <Fqdn>] [-DomainController <Fqdn>] [-GlobalCatalog <Fqdn>] [-GlobalSettingsDomainController <Fqdn>]

For example:

Get-CsAdDomain -Domain domain1.contoso.net – GlobalSettingsDomainController dc01.domain1.contoso.com

If you do not specify the Domain parameter, the default is the local domain.

This cmdlet returns a value of LC_DOMAINSETTINGS_STATE_READY if domain preparation was successful.

四. Granting Permissions

A. Granting Setup Permissions

1. Log on to a computer running Lync Server 2010 in the domain where you want to grant setup permissions. Use an account that is a member of the Domain Admins group or the Enterprise Admins group if the OU is in a different child domain.

2. Start the Lync Server Management Shell: Click Start, click All Programs, click Microsoft Lync Server 2010, and then click Lync Server Management Shell.

3. Run:

Grant-CsSetupPermission -ComputerOu <DN of the OU or container where the computer objects that will run Lync Server reside > [-Domain <Domain FQDN>]

You can specify the ComputerOu parameter as relative to the default naming context of the specified domain (for example, CN=computers). Alternatively, you can specify this parameter as the full OU distinguished name (DN) (for example, "CN=computers,DC=Contoso,DC=com"). In the latter case, you must specify an OU DN that is consistent with the domain you specify.

If you do not specify the Domain parameter, the default value is the local domain.

B. To verify setup permissions

1. Log on to a computer running Lync Server 2010 in the domain where you want to verify setup permissions that you granted by using the Grant-CsSetupPermission cmdlet. Use an account that is a member of the Domain Admins group or the Enterprise Admins group if the OU is in a different child domain.

2. Start the Lync Server Management Shell: Click Start, click All Programs, click Microsoft Lync Server 2010, and then click Lync Server Management Shell.

3. Run:

Test-CsSetupPermission -ComputerOu <DN of the OU or container where the computer objects that will run Lync Server reside> [-Domain <Domain FQDN>]

You can specify the ComputerOu parameter as relative to the default naming context of the specified domain (for example, CN=computers). Alternatively, you can specify this parameter as the full OU distinguished name (DN) (for example, "CN=computers,DC=Contoso,DC=com"). In the latter case, you must specify an OU DN that is consistent with the domain you specify.

If you do not specify the Domain parameter, the default value is the local domain.

五. Active Directory Domain Services Reference

Refer:

Preparing Active Directory Domain Services for Lync Server 2010.doc