Friday, November 9, 2018

Configuring Skype for Business Hybrid with GCC High Tenants

Configuring Skype for Business Hybrid with a GCC High Office 365 tenant is mostly the same, but it turns out that there are a few differences in terms of the DNS records and FQDNs that get set when running the PowerShell cmdlets. This brief posts walks you through the differences.


Differing DNS Records


When working with [U.S.] GOV tenants in Office 365, there are a couple different types of tenants that reflect varying levels of compliance & security requirements. Namely, there is:

  • Office 365 GCC
  • Office 365 GCC High and DoD
There are a number of compliance requirements that are met by each type of tenant, as can be guessed by the difference in names. Clearly, the Office 365 GCC High and DoD tenants meet a more strict set of requirements, as well as those that specifically target DoD entities.

There are several components to the architecture of these tenants that allow them to meet a more stringent set of requirements, and one of them is reflected by the difference in FQDNs and URLs that are used by endpoints to connect into these environments. Specifically, the Office 365 GCC High tenants (DoD is still being worked on) have a different list of required DNS records than your typical commercial tenant. While we are focusing on Skype for Business Online here, this also applies to Exchange Online.

The DNS records that are required for Skype for Business Online in a GCC High tenant are below:

CNAMEs
  • 'sip'
    • Points to: sipdir.online.gov.skypeforbusiness.us
  • 'lyncdiscover'
    • Points to: webdir.online.gov.skypeforbusiness.us
SRV
  • '_sip'
    • Points to: sipdir.online.gov.skypeforbusiness.us
    • Port: 443
    • Protocol: _tls
  • '_sipfederationtls'
    • Points to: sipfed.online.gov.skypeforbusiness.us
    • Port: 5061
    • Protocol: _tcp

Configuring Hybrid

As you can imagine, given the difference in the DNS records, you will want to slightly modify the PowerShell cmdlets that you use when setting up Hybrid for a Skype for Business environment that includes a GCC High tenant. Specifically, when running the New-CsHostingProvider cmdlet, you will want to do so like this, with the specified ProxyFqdn and AutoDiscoverUrl attributes:

New-CsHostingProvider -Identity SkypeforBusinessOnlineGov -ProxyFqdn -"sipfed.online.gov.skypeforbusiness.us" -Enabled $true -EnabledSharedAddressSpace $true -HostsOCSUsers $true -VerificationLevel UseSourceVerification -IsLocal $false -AutodiscoverUrl https://webdir.online.gov.skypeforbusiness.us/Autodiscover/AutodiscoverService.svc/root

The rest of the Hybrid configuration is pretty much the same. Next, when it comes to moving users via the Management Shell, you will modify the cmdlets like so:

Move-CsUser -Identity <user@domain.com> -Target sipfed.online.gov.skypeforbusiness.us -Credential $cred -HostedMigrationOverrideUrl https://admin1g.online.gov.skypeforbusiness.us/HostedMigration/hostedmigrationservice.svc.

So, to summarize, while I hate to seem like I am simplifying, we are pretty much putting 'gov.skypeforbusiness.us' anymore that 'lync.com' would typically show up in our Hybrid configuration process.

I hope this is able to save someone even a little bit of pain, somewhere. It seems like such a small thing, but if you are not aware of these differences, the errors that you will run into do not do a great job of letting you know where to start, and none of the "Configure Hybrid" documentation does a great job at calling out that there are differences for GCC High tenants.

40 comments:

  1. This comment has been removed by a blog administrator.

    ReplyDelete
  2. This comment has been removed by a blog administrator.

    ReplyDelete
  3. When conceptualizing the most ideal approaches to earn steady show consideration with your advertising group, consistently recollect that the group isn't the huge machine that numerous businesses improperly take it for.Best Bitcoin Trading online

    ReplyDelete
  4. There are numerous MLM plans that turned out to be inadequate in light of the fact that individuals donít realize the subtleties to be put on them. 소액결제현금화

    ReplyDelete
  5. Very useful info. Hope to see more posts soon!. Bolt Posts

    ReplyDelete
  6. I have added and shared your site to my social media accounts to send people back to your site because I am sure they will find it extremely helpful too. Corporate Headshots

    ReplyDelete
  7. You have a good point here!I totally agree with what you have said!!Thanks for sharing your views...hope more people will read this article!!! Cheapest bulk sms provider in Qatar

    ReplyDelete
  8. I really like your take on the issue. I now have a clear idea on what this matter is all about.. Bolt Posts

    ReplyDelete
  9. Thanks for the blog post buddy! Keep them coming... Bitcoin profit review

    ReplyDelete
  10. You have beaten yourself this time, and I appreciate you and hopping for some more informative posts in future. Thank you for sharing great information to us. as low as 3.95 a month

    ReplyDelete
  11. Nice to be visiting your blog again, it has been months for me. Well this article that i've been waited for so long. I need this article to complete my assignment in the college, and it has same topic with your article. Thanks, great share. Classified site in Dubai

    ReplyDelete
  12. Sometime it becomes very hard to find a well written and well established bog which give you correct and useful information. However, I found this blog and got some relevant information which are really helpful for me. 출장서비스

    ReplyDelete
  13. I wanted to thank you for this great read!! I definitely enjoying every little bit of it I have you bookmarked to check out new stuff you post. business setup dubai

    ReplyDelete
  14. An impressive share, I just given this onto a colleague who was doing a little analysis on this. And he in fact bought me breakfast because I found it for him.. smile. So let me reword that: Thnx for the treat! But yeah Thnkx for spending the time to discuss this, I feel strongly about it and love reading more on this topic. If possible, as you become expertise, would you mind updating your blog with more details? It is highly helpful for me. Big thumb up for this blog post!

    Anansekrom.com
    Information

    ReplyDelete
  15. There is noticeably a bundle to know about this. I assume you made certain nice points in features also.

    Fanfiction.net
    Information

    ReplyDelete
  16. An interesting discussion is worth comment. I think that you should write more on this topic, it might not be a taboo subject but generally people are not enough to speak on such topics. To the next. Cheers

    Click Here
    Visit Web

    ReplyDelete
  17. The next time I read a blog, I hope that it doesnt disappoint me as much as this one. I mean, I know it was my choice to read, but I actually thought you have something interesting to say. All I hear is a bunch of whining about something that you could fix if you werent too busy looking for attention.

    Buzzon.khaleejtimes.com
    Information

    ReplyDelete
  18. I am often to blogging and i really appreciate your content. The article has really peaks my interest. I am going to bookmark your site and keep checking for new information.

    Click Here
    Visit Web

    ReplyDelete
  19. i never know the use of adobe shadow until i saw this post. thank you for this! this is very helpful. Management Services

    ReplyDelete
  20. It’s hard to find knowledgeable people on this topic, but you sound like you know what you’re talking about! Thanks

    Mojomarketplace.com
    Information

    ReplyDelete
  21. Hello! I just would like to give a huge thumbs up for the great info you have here on this post. I will be coming back to your blog for more soon.

    Click Here
    Visit Web

    ReplyDelete
  22. There are some interesting points in time in this article but I don’t know if I see all of them center to heart. There is some validity but I will take hold opinion until I look into it further. Good article, thanks and we want more! Added to FeedBurner as well

    Click Here
    Visit Web

    ReplyDelete
  23. WONDERFUL Post.thanks for share..more wait..

    Click Here
    Visit Web

    ReplyDelete
  24. I am often to blogging and i really appreciate your content. The article has really peaks my interest. I am going to bookmark your site and keep checking for new information.

    Click Here
    Visit Web
    Itsarab.org

    ReplyDelete
  25. You should take part in a contest for one of the best blogs on the web. I will recommend this site!

    Yougen.co.uk
    Information

    ReplyDelete
  26. You should take part in a contest for one of the best blogs on the web. I will recommend this site!

    Click Here
    Visit Web

    ReplyDelete
  27. Your place is valueble for me. Thanks!…

    Click Here
    Visit Web

    ReplyDelete
  28. It’s hard to find knowledgeable people on this topic, but you sound like you know what you’re talking about! Thanks

    Hearthis.at
    Information

    ReplyDelete
  29. It’s hard to find knowledgeable people on this topic, but you sound like you know what you’re talking about! Thanks

    Hearthis.at
    Information

    ReplyDelete
  30. I’d have to check with you here. Which is not something I usually do! I enjoy reading a post that will make people think. Also, thanks for allowing me to comment!

    Click Here
    Visit Web

    ReplyDelete
  31. I found so many interesting stuff in your blog especially its discussion. From the tons of comments on your articles, I guess I am not the only one having all the enjoyment here! keep up the good work... B2B Data List

    ReplyDelete
  32. Remember numerous workers don't react well to micromanagement, which implies you have to utilize the most recent instruments to check their profitability.see more

    ReplyDelete
  33. The next time I read a blog, I hope that it doesnt disappoint me as much as this one. I mean, I know it was my choice to read, but I actually thought you have something interesting to say. All I hear is a bunch of whining about something that you could fix if you werent too busy looking for attention.

    Click Here
    Visit Web

    ReplyDelete
  34. This web site is really a walk-through for all of the info you wanted about this and didn’t know who to ask. Glimpse here, and you’ll definitely discover it.

    Ludomanistudier.dk
    Information

    ReplyDelete
  35. Thanks for sharing this
    Leanpitch provides online training in Scrum Master during this lockdown period everyone can use it wisely.
    Scrum Values

    ReplyDelete
  36. Thanks for sharing this
    Leanpitch provides online training in DevOps during this lockdown period everyone can use it wisely.
    DevOps Online Training

    ReplyDelete
  37. Thanks for sharing this
    Leanpitch provides online training in Scrum Master during this lockdown period everyone can use it wisely.
    Scrum Values

    ReplyDelete
  38. Leanpitch provides online training in DevOps during this lockdown period everyone can use it wisely.
    DevOps Online Training

    ReplyDelete
  39. This web site is really a walk-through for all of the info you wanted about this and didn’t know who to ask. Glimpse here, and you’ll definitely discover it.

    Spyropress.com
    Information

    ReplyDelete
  40. You have a tremendous website. Certainly a fantastic piece of work .It has relevant information. Thanks for posting this. Your blog is so interesting and very informative.

    Cheap Online Shopping UK

    ReplyDelete