While trying to decommissioning a Lync Server 2013 Director Pool we got the following error message when we publish the new topology:
This wasn’t expected since a Director Pool shouldn’t have users associated with it.
After troubleshooting the issue, we notice that some users had the attribute msRTCSIP-PrimaryHomeServer associated to the Lync Server 2013 Director Pool.
These users were previously moved to Skype for Business Online, during the move the attribute was updated to the Director Pool that was configured as federation route.
Please note that this behaviour can also happen if we have a Front End Server Pool in the federation route.
Because the msRTCSIP-PrimaryHomeServer attribute isn’t used by Skype for Business Online we can clear it.
The first step is to get the Pool Distinguished Name and the quickest way is using View Logs in the Publishing Wizard:
Then, we Expand all Actions and scroll down to Check Orphaned Users:
In this example the Pool Distinguished Name is:
CN=Lc Services,CN=Microsoft,CN=1:8,CN=Pools,CN=RTC Service,CN=Services,CN=Configuration,DC=uclobby,DC=com
And we assign it to a variable ($PoolDN):
$PoolDN=”CN=Lc Services,CN=Microsoft,CN=1:8,CN=Pools,CN=RTC Service,CN=Services,CN=Configuration,DC=uclobby,DC=com”
$PoolDN
Alternatively, we can use PowerShell to get the Pool Distinguished Name:
Import-module ActiveDirectory
$RTCDN = “AD:\CN=*,CN=Pools,CN=RTC Service,CN=Services,CN=Configuration,”+(Get-ADDomain).distinguishedname
$PoolDN=”CN=Lc Services,CN=Microsoft,”+(Get-ItemProperty -Path $RTCDN -Name dNSHostName,distinguishedname | ?{$_.dNSHostName -eq “<POOL FQDN>“}).distinguishedname
Now we can list the all users that have msRTCSIP-PrimaryHomeServer attribute associated to the pool:
Get-CsUser -LDAPFilter “(msRTCSIP-PrimaryHomeServer=$PoolDN)” | Select SamAccountName,DisplayName,SipAddress,HostingProvider | ft -AutoSize
Note: We can only use this workaround if the HostingProvider is sipfed.online.lync.com.
If we have few users we can simply clear the msRTCSIP-PrimaryHomeServer attribute manually:
Get-ADuser <USERACCOUNT> | Set-ADObject -Identity $_.distinguishedname -Clear “msRTCSIP-PrimaryHomeServer”
However, if we want to clear the attribute for all users associated to the Lync Server 2013 Director Pool we should use the following:
Get-ADObject -LDAPFilter “(& (msRTCSIP-PrimaryHomeServer=$PoolDN)(msRTCSIP-DeploymentLocator=sipfed.online.lync.com))” | Set-ADObject -Clear “msRTCSIP-PrimaryHomeServer”
Note: We added the msRTCSIP-DeploymentLocator since we can only clear the msRTCSIP-PrimaryHomeServer if the users were moved to Skype for Business Online.
After clearing the msRTCSIP-PrimaryHomeServer attribute we successfully remove the Lync Server 2013 Director Pool:
