deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-06-15 18:33:43 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

new build 4/11/16

Browse Source
This commit is contained in:
Brian Lich
2016-04-11 16:46:11 -07:00
parent 588b21be43
commit 984c4d3651
32 changed files with 345 additions and 982 deletions
Download Patch File Download Diff File Expand all files Collapse all files

50
devices/surface-hub/TOC.md
View File

@ -3,31 +3,31 @@
### [Intro to Microsoft Surface Hub](intro-to-surface-hub.md)
### [Physically install Microsoft Surface Hub](physically-install-your-surface-hub-device.md)
### [Prepare your environment for Microsoft Surface Hub](prepare-your-environment-for-surface-hub.md)
#### [Create and test a device account](prepare-your-environment-for-surface-hub-create-and-test-a-device-account.md)
##### [Online deployment](prepare-your-environment-for-surface-hub-how-do-i-online-deployment.md)
##### [On-premises deployment](prepare-your-environment-for-surface-hub-how-do-i-on-premises-deployment.md)
##### [Hybrid deployment](prepare-your-environment-for-surface-hub-how-do-i-hybrid-deployment.md)
##### [Create a device account using UI](prepare-your-environment-for-surface-hub-how-do-i-creating-a-device-account-using-office-365.md)
##### [Microsoft Exchange properties](prepare-your-environment-for-surface-hub-how-do-i-exchange-properties.md)
##### [Applying ActiveSync policies to device accounts](prepare-your-environment-for-surface-hub-how-do-i-applying-activesync-policies.md)
##### [Password management](prepare-your-environment-for-surface-hub-how-do-i-password-management.md)
#### [Create provisioning packages](prepare-your-environment-for-surface-hub-create-provisioning-packages-for-certificates.md)
#### [Admin group management](prepare-your-environment-for-surface-hub-admin-group-management.md)
### [Set up Microsoft Surface Hub](set-up-your-surface-hub--configure-.md)
#### [Setup worksheet](prepare-your-environment-for-surface-hub-setup-worksheet.md)
#### [First-run program](set-up-your-surface-hub--configure--first-run-program.md)
#### [Create and test a device account](create-and-test-a-device-account-surface-hub.md)
##### [Online deployment](online-deployment-surface-hub-device-accounts.md)
##### [On-premises deployment](on-premises-deployment-surface-hub-device-accounts.md)
##### [Hybrid deployment](hybrid-deployment-surface-hub-device-accounts.md)
##### [Create a device account using UI](create-a-device-account-using-office-365.md)
##### [Microsoft Exchange properties](exchange-properties-for-surface-hub-device-accounts.md)
##### [Applying ActiveSync policies to device accounts](apply-activesync-policies-for-surface-hub-device-accounts.md)
##### [Password management](password-management-for-surface-hub-device-accounts.md)
#### [Create provisioning packages](provisioning-packages-for-certificates-surface-hub.md)
#### [Admin group management](admin-group-management-for-surface-hub.md)
### [Set up Microsoft Surface Hub](set-up-your-surface-hub.md)
#### [Setup worksheet](setup-worksheet-surface-hub.md)
#### [First-run program](first-run-program-surface-hub.md)
### [Manage Microsoft Surface Hub](manage-surface-hub.md)
#### [Accessibility](manage-surface-hub-accessibility.md)
#### [Change the Surface Hub device account](manage-surface-hub-changing-the-device-account.md)
#### [Device reset](device-reset.md)
#### [Install apps on your Surface Hub](manage-surface-hub-installing-apps.md)
#### [Manage settings with a local admin account](manage-surface-hub-locally-managing-settings.md)
#### [Manage settings with an MDM provider](manage-surface-hub-remotely-managing-settings.md)
#### [Monitor your Surface Hub](manage-surface-hub-monitoring-your-surface-hubs.md)
#### [Save your BitLocker key](manage-surface-hub-bitlocker.md)
#### [Using a room control system](manage-surface-hub-using-serial-control.md)
#### [Windows updates](manage-surface-hub-windows-updates.md)
#### [Wireless network management](manage-surface-hub-wireless-network-management.md)
#### [Accessibility](accessibility-surface-hub.md)
#### [Change the Surface Hub device account](change-surface-hub-device-account.md)
#### [Device reset](device-reset-suface-hub.md)
#### [Install apps on your Surface Hub](install-apps-on-surface-hub.md)
#### [Manage settings with a local admin account](manage-settings-with-local-admin-account-surface-hub.md)
#### [Manage settings with an MDM provider](manage-settings-with-mdm-for-surface-hub.md)
#### [Monitor your Surface Hub](monitor-surface-hub.md)
#### [Save your BitLocker key](save-bitlocker-key-surface-hub.md)
#### [Using a room control system](use-room-control-system-with-surface-hub.md)
#### [Windows updates](manage-windows-updates-for-surface-hub.md)
#### [Wireless network management](wireless-network-management-for-surface-hub.md)
### [Troubleshoot Microsoft Surface Hub](troubleshoot-surface-hub.md)
### [Appendix: PowerShell](appendix-a--powershell.md)
### [Appendix: PowerShell](appendix-a-powershell-scripts-for-surface-hub.md)

0
devices/surface-hub/manage-surface-hub-accessibility.md → devices/surface-hub/accessibility-surface-hub.md
View File

0
devices/surface-hub/prepare-your-environment-for-surface-hub-admin-group-management.md → devices/surface-hub/admin-group-management-for-surface-hub.md
View File

4
devices/surface-hub/appendix-a--powershell.md → devices/surface-hub/appendix-a-powershell-scripts-for-surface-hub.md
View File

@ -173,7 +173,7 @@ The account creation scripts cannot modify an already existing account, but can
### <a href="" id="create-on-premise-ps-scripts"></a>Create an on-premise account
Creates an account as described in [On-premises deployment](prepare-your-environment-for-surface-hub-how-do-i-on-premises-deployment.md).
Creates an account as described in [On-premises deployment](on-premises-deployment-surface-hub-device-accounts.md).
```PowerShell
# SHAccountCreateOnPrem.ps1
@ -539,7 +539,7 @@ else
### <a href="" id="create-os356-ps-scripts"></a>Create a device account using Office 365
Creates an account as described in [Create a device account using Office 365](prepare-your-environment-for-surface-hub-how-do-i-creating-a-device-account-using-office-365.md)
Creates an account as described in [Create a device account using Office 365](create-a-device-account-using-office-365.md)
```PowerShell
# SHAccountCreateO365.ps1

0
devices/surface-hub/prepare-your-environment-for-surface-hub-how-do-i-applying-activesync-policies.md → devices/surface-hub/apply-activesync-policies-for-surface-hub-device-accounts.md
View File

0
devices/surface-hub/manage-surface-hub-changing-the-device-account.md → devices/surface-hub/change-surface-hub-device-account.md
View File

130
devices/surface-hub/prepare-your-environment-for-surface-hub-how-do-i-creating-a-device-account-using-office-365.md → devices/surface-hub/create-a-device-account-using-office-365.md
View File

@ -194,7 +194,7 @@ Now that you're connected to the online services, you can finish setting up the
![image showing powershell cmdlet.](images/setupdeviceaccto365-25.png)
4. Various Exchange properties can be set on the device account to improve the meeting experience. You can see which properties need to be set in the [Exchange properties](prepare-your-environment-for-surface-hub-how-do-i-exchange-properties.md) section.
4. Various Exchange properties can be set on the device account to improve the meeting experience. You can see which properties need to be set in the [Exchange properties](exchange-properties-for-surface-hub-device-accounts.md) section.
``` syntax
Set-CalendarProcessing -Identity $acctUpn -AutomateProcessing AutoAccept -AddOrganizerToSubject $false –AllowConflicts $false –DeleteComments $false -DeleteSubject $false -RemovePrivateProperty $false
@ -203,7 +203,7 @@ Now that you're connected to the online services, you can finish setting up the
![image showing powershell cmdlet.](images/setupdeviceaccto365-26.png)
5. If you decide to have the password not expire, you can set that with PowerShell cmdlets too. See [Password management](prepare-your-environment-for-surface-hub-how-do-i-password-management.md) for more information.
5. If you decide to have the password not expire, you can set that with PowerShell cmdlets too. See [Password management](password-management-for-surface-hub-device-accounts.md) for more information.
``` syntax
Set-MsolUser -UserPrincipalName $strEmail -PasswordNeverExpires $True
@ -222,63 +222,24 @@ In order to enable Skype for Business, your environment will need to meet the fo
1. Start by creating a remote PowerShell session from a PC.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Import-Module LyncOnlineConnector
```PowerShell
Import-Module LyncOnlineConnector
$cssess=New-CsOnlineSession -Credential $cred
Import-PSSession $cssess -AllowClobber</code></pre></td>
</tr>
</tbody>
</table>
Import-PSSession $cssess -AllowClobber
```
2. To enable your Surface Hub account for Skype for Business Server, run this cmdlet:
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Enable-CsMeetingRoom -Identity $rm -RegistrarPool
&quot;sippoolbl20a04.infra.lync.com&quot; -SipAddressType EmailAddress</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
Enable-CsMeetingRoom -Identity $rm -RegistrarPool
"sippoolbl20a04.infra.lync.com" -SipAddressType EmailAddress
```
If you aren't sure what value to use for the `RegistrarPool` parameter in your environment, you can get the value from an existing Skype for Business user using this cmdlet:
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Get-CsOnlineUser -Identity ‘alice@contoso.microsoft.com’| fl *registrarpool*</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
Get-CsOnlineUser -Identity ‘alice@contoso.microsoft.com’| fl *registrarpool*
```
## <a href="" id="create-device-acct-eac"></a>Create a device account using the Exchange Admin Center
@ -383,7 +344,7 @@ Now that you're connected to the online services, you can finish setting up the
Set-Mailbox $strEmail -RoomMailboxPassword (ConvertTo-SecureString -String "<your password>" -AsPlainText -Force) -EnableRoomMailboxAccount $true
```
4. Various Exchange properties can be set on the device account to improve the meeting experience. You can see which properties need to be set in the [Exchange properties](prepare-your-environment-for-surface-hub-how-do-i-exchange-properties.md) section.
4. Various Exchange properties can be set on the device account to improve the meeting experience. You can see which properties need to be set in the [Exchange properties](exchange-properties-for-surface-hub-device-accounts.md) section.
``` syntax
Set-CalendarProcessing -Identity $acctUpn -AutomateProcessing AutoAccept -AddOrganizerToSubject $false –AllowConflicts $false –DeleteComments $false -DeleteSubject $false -RemovePrivateProperty $false
@ -402,7 +363,7 @@ Now that you're connected to the online services, you can finish setting up the
Set-ADUser $strAlias -Enabled $True
```
7. If you decide to have the password not expire, you can set that with PowerShell cmdlets too. See [Password management](prepare-your-environment-for-surface-hub-how-do-i-password-management.md) for more information.
7. If you decide to have the password not expire, you can set that with PowerShell cmdlets too. See [Password management](password-management-for-surface-hub-device-accounts.md) for more information.
``` syntax
Set-ADUser $strAlias -PasswordNeverExpires $True
@ -421,63 +382,24 @@ In order to enable Skype for Business, your environment will need to meet the fo
1. Start by creating a remote PowerShell session from a PC.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Import-Module LyncOnlineConnector
```PowerShell
Import-Module LyncOnlineConnector
$cssess=New-CsOnlineSession -Credential $cred
Import-PSSession $cssess -AllowClobber</code></pre></td>
</tr>
</tbody>
</table>
Import-PSSession $cssess -AllowClobber
```
2. To enable your Surface Hub account for Skype for Business Server, run this cmdlet:
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Enable-CsMeetingRoom -Identity $rm -RegistrarPool
&quot;sippoolbl20a04.infra.lync.com&quot; -SipAddressType EmailAddress</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
Enable-CsMeetingRoom -Identity $rm -RegistrarPool
"sippoolbl20a04.infra.lync.com" -SipAddressType EmailAddress
```
If you aren't sure what value to use for the `RegistrarPool` parameter in your environment, you can get the value from an existing Skype for Business user using this cmdlet:
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Get-CsOnlineUser -Identity ‘alice@contoso.microsoft.com’| fl *registrarpool*</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
Get-CsOnlineUser -Identity ‘alice@contoso.microsoft.com’| fl *registrarpool*
```
 

36
devices/surface-hub/prepare-your-environment-for-surface-hub-create-and-test-a-device-account.md → devices/surface-hub/create-and-test-a-device-account-surface-hub.md
View File

@ -30,7 +30,7 @@ Every device account is unique to a single Surface Hub, and requires some setup:
You can think of a device account as the resource account that people recognize as a conference room’s or meeting space’s account. When you want to schedule a meeting using that conference room, you invite the account to that meeting. In order to use the Surface Hub most effectively, you do the same with the device account that's assigned to each one.
If you already have a resource mailbox account set up for the meeting space where you’re putting a Surface Hub, you can change that resource account into a device account. Once that’s done, all you need to do is add the device account to a Surface Hub. See step 2 of either [On-premises deployment](prepare-your-environment-for-surface-hub-how-do-i-on-premises-deployment.md) or [Online deployment (Office 365)](prepare-your-environment-for-surface-hub-how-do-i-online-deployment.md).
If you already have a resource mailbox account set up for the meeting space where you’re putting a Surface Hub, you can change that resource account into a device account. Once that’s done, all you need to do is add the device account to a Surface Hub. See step 2 of either [On-premises deployment](on-premises-deployment-surface-hub-device-accounts.md) or [Online deployment (Office 365)](online-deployment-surface-hub-device-accounts.md).
The following sections will describe how to create and test a device account before configuring your Surface Hub.
@ -90,7 +90,7 @@ While the properties for the basic configuration will allow the device account t
<tr class="odd">
<td align="left"><p>Certificate-based authentication</p></td>
<td align="left"><p>Certificates may be required for both ActiveSync and Skype for Business. To deploy certificates, you need to use provisioning packages or an MDM solution.</p>
<p>See [Create provisioning packages](prepare-your-environment-for-surface-hub-create-provisioning-packages-for-certificates.md) for details.</p></td>
<p>See [Create provisioning packages](provisioning-packages-for-certificates-surface-hub.md) for details.</p></td>
</tr>
<tr class="even">
<td align="left"><p>Allowed device IDs (ActiveSync Device ID)</p></td>
@ -104,7 +104,7 @@ While the properties for the basic configuration will allow the device account t
### How do I set up the account?
The best way to set up device accounts is to configure them using remote PowerShell. We provide several PowerShell scripts that will help create new device accounts, or validate existing resource accounts you have in order to help you turn them into compatible Surface Hub device accounts. These PowerShell scripts, and instructions for their use, are in [Appendix: PowerShell](appendix-a--powershell.md).
The best way to set up device accounts is to configure them using remote PowerShell. We provide several PowerShell scripts that will help create new device accounts, or validate existing resource accounts you have in order to help you turn them into compatible Surface Hub device accounts. These PowerShell scripts, and instructions for their use, are in [Appendix: PowerShell](appendix-a-powershell-scripts-for-surface-hub.md).
You can check online for updated versions at [Surface Hub device account scripts](http://aka.ms/surfacehubscripts).
@ -114,19 +114,19 @@ Your infrastructure will likely fall into one of three configurations. Which con
![](images/deploymentoptions-01.png)
- [Online deployment (Office 365)](prepare-your-environment-for-surface-hub-how-do-i-online-deployment.md): Your organization’s environment is deployed entirely on Office 365.
- [On-premises deployment](prepare-your-environment-for-surface-hub-how-do-i-on-premises-deployment.md): Your organization has servers that it controls, where Active Directory, Exchange, and Skype for Business (or Lync) are hosted.
- [Hybrid deployment](prepare-your-environment-for-surface-hub-how-do-i-hybrid-deployment.md): Your organization has a mix of services, with some hosted on-premises and some hosted online through Office 365.
- [Online deployment (Office 365)](online-deployment-surface-hub-device-accounts.md): Your organization’s environment is deployed entirely on Office 365.
- [On-premises deployment](on-premises-deployment-surface-hub-device-accounts.md): Your organization has servers that it controls, where Active Directory, Exchange, and Skype for Business (or Lync) are hosted.
- [Hybrid deployment](hybrid-deployment-surface-hub-device-accounts.md): Your organization has a mix of services, with some hosted on-premises and some hosted online through Office 365.
If you prefer to use the Office 365 UI over PowerShell cmdlets, some steps can be performed manually. See [Creating a device account using Office 365](prepare-your-environment-for-surface-hub-how-do-i-creating-a-device-account-using-office-365.md).
If you prefer to use the Office 365 UI over PowerShell cmdlets, some steps can be performed manually. See [Creating a device account using Office 365](create-a-device-account-using-office-365.md).
### Device account resources
These sections describe resources used by the Surface Hub device account.
- [Exchange properties](prepare-your-environment-for-surface-hub-how-do-i-exchange-properties.md): The Exchange properties of the device account must be set to particular values for the Surface Hub to work properly.
- [Applying ActiveSync policies to device accounts](prepare-your-environment-for-surface-hub-how-do-i-applying-activesync-policies.md): The Surface Hub uses ActiveSync to sync both mail and its meeting calendar.
- [Password management](prepare-your-environment-for-surface-hub-how-do-i-password-management.md): Every device account requires a password to authenticate. This section describes your options for managing this password.
- [Exchange properties](exchange-properties-for-surface-hub-device-accounts.md): The Exchange properties of the device account must be set to particular values for the Surface Hub to work properly.
- [Applying ActiveSync policies to device accounts](apply-activesync-policies-for-surface-hub-device-accounts.md): The Surface Hub uses ActiveSync to sync both mail and its meeting calendar.
- [Password management](password-management-for-surface-hub-device-accounts.md): Every device account requires a password to authenticate. This section describes your options for managing this password.
## In this section
@ -144,31 +144,31 @@ These sections describe resources used by the Surface Hub device account.
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>[Online deployment](prepare-your-environment-for-surface-hub-how-do-i-online-deployment.md)</p></td>
<td align="left"><p>[Online deployment](online-deployment-surface-hub-device-accounts.md)</p></td>
<td align="left"><p>This topic has instructions for adding a device account for your Surface Hub when you have a pure, online deployment.</p></td>
</tr>
<tr class="even">
<td align="left"><p>[On-premises deployment](prepare-your-environment-for-surface-hub-how-do-i-on-premises-deployment.md)</p></td>
<td align="left"><p>[On-premises deployment](on-premises-deployment-surface-hub-device-accounts.md)</p></td>
<td align="left"><p>This topic explains how you add a device account for your Surface Hub when you have a single-forest, on-premises deployment.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>[Hybrid deployment](prepare-your-environment-for-surface-hub-how-do-i-hybrid-deployment.md)</p></td>
<td align="left"><p>A hybrid deployment requires special processing in order to set up a device account for your Surface Hub. If you’re using a hybrid deployment, in which your organization has a mix of services, with some hosted on-premises and some hosted online, then your configuration will depend on where each service is hosted. This topic covers hybrid deployments for [Exchange hosted on-prem](#hybrid-exchange-on-prem), and [Exchange hosted online](#hybrid-exchange-online). Because there are so many different variations in this type of deployment, it's not possible to provide detailed instructions for all of them. The following process will work for many configurations. If the process isn't right for your setup, we recommend that you use PowerShell (see [Appendix: PowerShell](appendix-a--powershell.md)) to achieve the same end result as documented here, and for other deployment options. You should then use the provided PowerShell script to verify your Surface Hub setup. (See [Account Verification Script](appendix-a--powershell.md#acct-verification-ps-scripts).)</p></td>
<td align="left"><p>[Hybrid deployment](hybrid-deployment-surface-hub-device-accounts.md)</p></td>
<td align="left"><p>A hybrid deployment requires special processing in order to set up a device account for your Surface Hub. If you’re using a hybrid deployment, in which your organization has a mix of services, with some hosted on-premises and some hosted online, then your configuration will depend on where each service is hosted. This topic covers hybrid deployments for [Exchange hosted on-prem](#hybrid-exchange-on-prem), and [Exchange hosted online](#hybrid-exchange-online). Because there are so many different variations in this type of deployment, it's not possible to provide detailed instructions for all of them. The following process will work for many configurations. If the process isn't right for your setup, we recommend that you use PowerShell (see [Appendix: PowerShell](appendix-a-powershell-scripts-for-surface-hub.md)) to achieve the same end result as documented here, and for other deployment options. You should then use the provided PowerShell script to verify your Surface Hub setup. (See [Account Verification Script](appendix-a--powershell.md#acct-verification-ps-scripts).)</p></td>
</tr>
<tr class="even">
<td align="left"><p>[Create a device account using UI](prepare-your-environment-for-surface-hub-how-do-i-creating-a-device-account-using-office-365.md)</p></td>
<td align="left"><p>[Create a device account using UI](create-a-device-account-using-office-365.md)</p></td>
<td align="left"><p>If you prefer to use a graphical user interface, you can create a device account for your Surface Hub with either the [Office 365 UI](#create-device-acct-o365) or the [Exchange Admin Center](#create-device-acct-eac).</p></td>
</tr>
<tr class="odd">
<td align="left"><p>[Microsoft Exchange properties](prepare-your-environment-for-surface-hub-how-do-i-exchange-properties.md)</p></td>
<td align="left"><p>[Microsoft Exchange properties](exchange-properties-for-surface-hub-device-accounts.md)</p></td>
<td align="left"><p>Some Exchange properties of the device account must be set to particular values to have the best meeting experience on Surface Hub. The following table lists various Exchange properties based on PowerShell cmdlet parameters, their purpose, and the values they should be set to.</p></td>
</tr>
<tr class="even">
<td align="left"><p>[Applying ActiveSync policies to device accounts](prepare-your-environment-for-surface-hub-how-do-i-applying-activesync-policies.md)</p></td>
<td align="left"><p>[Applying ActiveSync policies to device accounts](apply-activesync-policies-for-surface-hub-device-accounts.md)</p></td>
<td align="left"><p>The Surface Hub's device account uses ActiveSync to sync mail and calendar. This allows people to join and start scheduled meetings from the Surface Hub, and allows them to email any whiteboards they have made during their meeting.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>[Password management](prepare-your-environment-for-surface-hub-how-do-i-password-management.md)</p></td>
<td align="left"><p>[Password management](password-management-for-surface-hub-device-accounts.md)</p></td>
<td align="left"><p>Every Surface Hub device account requires a password to authenticate and enable features on the device.</p></td>
</tr>
</tbody>

2
devices/surface-hub/device-reset.md → devices/surface-hub/device-reset-suface-hub.md
View File

@ -25,7 +25,7 @@ Initiating a reset will return the device to the last cumulative Windows update,
- Local admins on the device
- Configurations from MDM or the Settings app.
After the reset, you'll be taken through the [first run program](set-up-your-surface-hub--configure--first-run-program.md) again.
After the reset, you'll be taken through the [first run program](first-run-program-surface-hub.md) again.
## Related topics

0
devices/surface-hub/prepare-your-environment-for-surface-hub-how-do-i-exchange-properties.md → devices/surface-hub/exchange-properties-for-surface-hub-device-accounts.md
View File

18
devices/surface-hub/set-up-your-surface-hub--configure--first-run-program.md → devices/surface-hub/first-run-program-surface-hub.md
View File

@ -15,7 +15,7 @@ By now, you should have gone through all of the previous steps:
- [Prepare your environment for Surface Hub](prepare-your-environment-for-surface-hub.md)
- [Physically install your Surface Hub device](physically-install-your-surface-hub-device.md), and
- [Setup worksheet](prepare-your-environment-for-surface-hub-setup-worksheet.md)
- [Setup worksheet](setup-worksheet-surface-hub.md)
Assuming that's the case, first run should be both simple and quick.
The normal procedure goes through six steps:
@ -38,7 +38,7 @@ Each of these sections also contains information about paths you might take when
This is the first screen you'll see when you power up the Surface Hub for the first time. It's where you input localization information for your device.
**Note**  This is also where you begin the optional process of deploying a provisioning package. See [Create provisioning packages](prepare-your-environment-for-surface-hub-create-provisioning-packages-for-certificates.md) if that's what you're doing.
**Note**  This is also where you begin the optional process of deploying a provisioning package. See [Create provisioning packages](provisioning-packages-for-certificates-surface-hub.md) if that's what you're doing.
 
@ -55,7 +55,7 @@ If the default values shown are correct, then you can click **Next** to go on. O
### What happens?
**Note**  Once the settings on this page are entered, you can't come back to this screen unless you reset the device (see [Device reset](device-reset.md)). Make sure that the settings are properly configured before proceeding.
**Note**  Once the settings on this page are entered, you can't come back to this screen unless you reset the device (see [Device reset](device-reset-suface-hub.md)). Make sure that the settings are properly configured before proceeding.
 
@ -76,7 +76,7 @@ This screen is shown only if the device fails to detect a wired network. If you
- You can select one of the wireless networks shown. If the network is secured, you'll be taken to a login page. See [Wireless network setup](#wireless) for details.
- Click **Skip this step** to skip connecting to a network. You'll be taken to the [Set up for you page](#set-up-for-you).
**Note**  If you skip this, the device will not have a network connection, and nothing that requires a network connection will work on your Surface Hub, including system updates and email and calendar synchronization. You can connect to a wireless network later using Settings (see [Wireless network managment](manage-surface-hub-wireless-network-management.md)).
**Note**  If you skip this, the device will not have a network connection, and nothing that requires a network connection will work on your Surface Hub, including system updates and email and calendar synchronization. You can connect to a wireless network later using Settings (see [Wireless network managment](wireless-network-management-for-surface-hub.md)).
 
@ -84,7 +84,7 @@ This screen is shown only if the device fails to detect a wired network. If you
### What happens?
If the device has a wired connection when it starts, and can establish a network or Internet connection, then this page will not be displayed. If you want to connect the device to a wireless connection, make sure no Ethernet cable is plugged in at first run, which will bring you to this screen. No matter what you choose to set up now, you can [use Settings](manage-surface-hub-wireless-network-management.md) to set up different connections later.
If the device has a wired connection when it starts, and can establish a network or Internet connection, then this page will not be displayed. If you want to connect the device to a wireless connection, make sure no Ethernet cable is plugged in at first run, which will bring you to this screen. No matter what you choose to set up now, you can [use Settings](wireless-network-management-for-surface-hub.md) to set up different connections later.
If you want to connect to a secured wireless network from this page, click on the network of your choice, and then provide the necessary information (password or account credentials) to connect. See [Wireless network setup](#wireless).
@ -111,7 +111,7 @@ This page will be shown when the device detects a wired connection with limited
- You can select a wireless network to use instead of the limited wired connection.
- You can skip connecting to a network by selecting **Skip this step**. You'll be taken to the [Set up for you page](#set-up-for-you).
**Note**  If you skip this, the device will not have a network connection, and nothing that requires a network connection will work on your Surface Hub, including things like email and calendar synchronization. You can connect to a wireless network later using Settings (see [Wireless network managment](manage-surface-hub-wireless-network-management.md)).
**Note**  If you skip this, the device will not have a network connection, and nothing that requires a network connection will work on your Surface Hub, including things like email and calendar synchronization. You can connect to a wireless network later using Settings (see [Wireless network managment](wireless-network-management-for-surface-hub.md)).
 
@ -136,7 +136,7 @@ When you click **Next**, the device will attempt to connect to the proxy server.
You can skip connecting to a network by selecting **Skip this step**. You'll be taken to the [Set up for you page](#set-up-for-you).
**Note**  If you skip this, the device will not have a network connection, and nothing that requires a network connection will work on your Surface Hub, including things like email and calendar synchronization. You can connect to a wireless network later using Settings (see [Wireless network managment](manage-surface-hub-wireless-network-management.md)).
**Note**  If you skip this, the device will not have a network connection, and nothing that requires a network connection will work on your Surface Hub, including things like email and calendar synchronization. You can connect to a wireless network later using Settings (see [Wireless network managment](wireless-network-management-for-surface-hub.md)).
 
@ -160,7 +160,7 @@ The settings shown on the page have already been made, and can't be changed unti
## <a href="" id="device-account"></a>Device account page
On this page, the Surface Hub will ask for credentials for the device account that you previously configured. (See [Create and test a device account](prepare-your-environment-for-surface-hub-create-and-test-a-device-account.md).) The Surface Hub will attempt to discover various properties of the account, and may ask for more information on another page if it does not succeed.
On this page, the Surface Hub will ask for credentials for the device account that you previously configured. (See [Create and test a device account](create-and-test-a-device-account-surface-hub.md).) The Surface Hub will attempt to discover various properties of the account, and may ask for more information on another page if it does not succeed.
**Note**  This section does not cover specific errors that can happen during first run. See [Troubleshoot Surface Hub](troubleshoot-surface-hub.md) for more information on errors.
@ -414,7 +414,7 @@ This page will attempt to create a new admin account using the credentials that
## <a href="" id="update-surface-hub"></a>Update the Surface Hub
**Important**  Before you do the updates, make sure you read [Save your BitLocker key](manage-surface-hub-bitlocker.md) in order to make sure you have a backup of the key.
**Important**  Before you do the updates, make sure you read [Save your BitLocker key](save-bitlocker-key-surface-hub.md) in order to make sure you have a backup of the key.
 

427
devices/surface-hub/prepare-your-environment-for-surface-hub-how-do-i-hybrid-deployment.md → devices/surface-hub/hybrid-deployment-surface-hub-device-accounts.md
View File

@ -9,7 +9,7 @@ author: TrudyHa
# Hybrid deployment (Surface Hub)
A hybrid deployment requires special processing in order to set up a device account for your Microsoft Surface Hub. If you’re using a hybrid deployment, in which your organization has a mix of services, with some hosted on-premises and some hosted online, then your configuration will depend on where each service is hosted. This topic covers hybrid deployments for [Exchange hosted on-prem](#hybrid-exchange-on-prem), and [Exchange hosted online](#hybrid-exchange-online). Because there are so many different variations in this type of deployment, it's not possible to provide detailed instructions for all of them. The following process will work for many configurations. If the process isn't right for your setup, we recommend that you use PowerShell (see [Appendix: PowerShell](appendix-a--powershell.md)) to achieve the same end result as documented here, and for other deployment options. You should then use the provided PowerShell script to verify your Surface Hub setup. (See [Account Verification Script](appendix-a--powershell.md#acct-verification-ps-scripts).)
A hybrid deployment requires special processing in order to set up a device account for your Microsoft Surface Hub. If you’re using a hybrid deployment, in which your organization has a mix of services, with some hosted on-premises and some hosted online, then your configuration will depend on where each service is hosted. This topic covers hybrid deployments for [Exchange hosted on-prem](#hybrid-exchange-on-prem), and [Exchange hosted online](#hybrid-exchange-online). Because there are so many different variations in this type of deployment, it's not possible to provide detailed instructions for all of them. The following process will work for many configurations. If the process isn't right for your setup, we recommend that you use PowerShell (see [Appendix: PowerShell](appendix-a-powershell-scripts-for-surface-hub.md)) to achieve the same end result as documented here, and for other deployment options. You should then use the provided PowerShell script to verify your Surface Hub setup. (See [Account Verification Script](appendix-a--powershell.md#acct-verification-ps-scripts).)
## <a href="" id="hybrid-exchange-on-prem"></a>Exchange on-prem
@ -38,22 +38,9 @@ Use this procedure if you use Exchange on-prem.
Open your on-prem Exchange Management Shell with administrator permissions, and run this cmdlet.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Enable-Mailbox &#39;HUB01@contoso.com&#39; -RemoteRoutingAddress &#39;HUB01@contoso.com&#39; -Room</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
Enable-Mailbox &#39;HUB01@contoso.com&#39; -RemoteRoutingAddress &#39;HUB01@contoso.com&#39; -Room
```
4. Connect to Microsoft Exchange Online and set some properties for the account in Office 365.
@ -61,26 +48,13 @@ Use this procedure if you use Exchange on-prem.
The next steps will be run on your Office 365 tenant.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Set-ExecutionPolicy Unrestricted
```PowerShell
Set-ExecutionPolicy Unrestricted
$org=&#39;contoso.com&#39;
$cred=Get-Credential $admin@$org
$sess= New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri &#39;https://outlook.office365.com/powershell-liveid/&#39; -Credential $cred -Authentication Basic -AllowRedirection
Import-PSSession $sess</code></pre></td>
</tr>
</tbody>
</table>
Import-PSSession $sess
```
5. Create a new Exchange ActiveSync policy, or use a compatible existing policy.
@ -88,84 +62,32 @@ Use this procedure if you use Exchange on-prem.
If you haven’t created a compatible policy yet, use the following cmdlet—this one creates a policy called "Surface Hubs". Once it’s created, you can apply the same policy to other device accounts.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>$easPolicy = New-MobileDeviceMailboxPolicy -Name “SurfaceHubs” -PasswordEnabled $false</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
$easPolicy = New-MobileDeviceMailboxPolicy -Name “SurfaceHubs” -PasswordEnabled $false
```
Once you have a compatible policy, then you will need to apply the policy to the device account.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Set-CASMailbox &#39;HUB01@contoso.com&#39; -ActiveSyncMailboxPolicy $easPolicy</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
Set-CASMailbox &#39;HUB01@contoso.com&#39; -ActiveSyncMailboxPolicy $easPolicy
```
6. Set Exchange properties.
Setting Exchange properties on the device account to improve the meeting experience. You can see which properties need to be set in the [Exchange properties](prepare-your-environment-for-surface-hub-how-do-i-exchange-properties.md) section.
Setting Exchange properties on the device account to improve the meeting experience. You can see which properties need to be set in the [Exchange properties](exchange-properties-for-surface-hub-device-accounts.md) section.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Set-CalendarProcessing -Identity &#39;HUB01@contoso.com&#39; -AutomateProcessing AutoAccept -AddOrganizerToSubject $false –AllowConflicts $false –DeleteComments $false -DeleteSubject $false -RemovePrivateProperty $false
Set-CalendarProcessing -Identity &#39;HUB01@contoso.com&#39; -AddAdditionalResponse $true -AdditionalResponse &#39;This is a Surface Hub room!&#39;</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
Set-CalendarProcessing -Identity &#39;HUB01@contoso.com&#39; -AutomateProcessing AutoAccept -AddOrganizerToSubject $false –AllowConflicts $false –DeleteComments $false -DeleteSubject $false -RemovePrivateProperty $false
Set-CalendarProcessing -Identity &#39;HUB01@contoso.com&#39; -AddAdditionalResponse $true -AdditionalResponse &#39;This is a Surface Hub room!&#39;
```
7. Connect to Azure AD.
You need to connect to Azure AD to apply some account settings. You can run this cmdlet to connect.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Connect-MsolService -Credential $cred</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
Connect-MsolService -Credential $cred
```
8. Assign an Office 365 license.
@ -175,24 +97,11 @@ Use this procedure if you use Exchange on-prem.
Once you list out the SKUs, you can add a license using the `Set-MsolUserLicense` cmdlet. In this case, `$strLicense` is the SKU code that you see (for example, *contoso:STANDARDPACK*).
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Set-MsolUser -UserPrincipalName &#39;HUB01@contoso.com&#39; -UsageLocation &#39;US&#39;
```PowerShell
Set-MsolUser -UserPrincipalName &#39;HUB01@contoso.com&#39; -UsageLocation &#39;US&#39;
Get-MsolAccountSku
Set-MsolUserLicense -UserPrincipalName &#39;HUB01@contoso.com&#39; -AddLicenses $strLicense</code></pre></td>
</tr>
</tbody>
</table>
Set-MsolUserLicense -UserPrincipalName &#39;HUB01@contoso.com&#39; -AddLicenses $strLicense
```
9. Enable the device account with Skype for Business.
@ -205,63 +114,24 @@ Use this procedure if you use Exchange on-prem.
1. Start by creating a remote PowerShell session from a PC.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Import-Module LyncOnlineConnector
```PowerShell
Import-Module LyncOnlineConnector
$cssess=New-CsOnlineSession -Credential $cred
Import-PSSession $cssess -AllowClobber</code></pre></td>
</tr>
</tbody>
</table>
Import-PSSession $cssess -AllowClobber
```
2. To enable your Surface Hub account for Skype for Business Server, run this cmdlet:
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Enable-CsMeetingRoom -Identity $rm -RegistrarPool
&#39;sippoolbl20a04.infra.lync.com&#39; -SipAddressType EmailAddress</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
Enable-CsMeetingRoom -Identity $rm -RegistrarPool
&#39;sippoolbl20a04.infra.lync.com&#39; -SipAddressType EmailAddress
```
If you aren't sure what value to use for the `RegistrarPool` parameter in your environment, you can get the value from an existing Skype for Business user using this cmdlet:
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Get-CsOnlineUser -Identity ‘alice@contoso.com’| fl *registrarpool*</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
Get-CsOnlineUser -Identity ‘alice@contoso.com’| fl *registrarpool*
```
10. Assign Skype for Business license to your Surface Hub account
@ -289,26 +159,13 @@ Use this procedure if you use Exchange online.
Start a remote PowerShell session on a PC and connect to Exchange. Be sure you have the right permissions set to run the associated cmdlets.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Set-ExecutionPolicy Unrestricted
```PowerShell
Set-ExecutionPolicy Unrestricted
$org=&#39;contoso.microsoft.com
$cred=Get-Credential $admin@$org
$sess= New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $cred -Authentication Basic -AllowRedirection
Import-PSSession $sess</code></pre></td>
</tr>
</tbody>
</table>
Import-PSSession $sess
```
2. Set up mailbox.
@ -316,41 +173,15 @@ Use this procedure if you use Exchange online.
If you're changing an existing resource mailbox:
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Set-Mailbox -Identity &#39;HUB01&#39; -EnableRoomMailboxAccount $true -RoomMailboxPassword (ConvertTo-SecureString -String &lt;password&gt; -AsPlainText -Force)</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
Set-Mailbox -Identity &#39;HUB01&#39; -EnableRoomMailboxAccount $true -RoomMailboxPassword (ConvertTo-SecureString -String <password> -AsPlainText -Force)
```
If you’re creating a new resource mailbox:
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>New-Mailbox -MicrosoftOnlineServicesID &#39;HUB01@contoso.com&#39; -Alias HUB01 -Name &quot;Hub-01&quot; -Room -EnableRoomMailboxAccount $true -RoomMailboxPassword (ConvertTo-SecureString -String &lt;password&gt; -AsPlainText -Force)</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
New-Mailbox -MicrosoftOnlineServicesID &#39;HUB01@contoso.com&#39; -Alias HUB01 -Name "Hub-01" -Room -EnableRoomMailboxAccount $true -RoomMailboxPassword (ConvertTo-SecureString -String <password> -AsPlainText -Force)
```
3. Create Exchange ActiveSync policy.
@ -360,66 +191,27 @@ Use this procedure if you use Exchange online.
If you haven’t created a compatible policy yet, use the following cmdlet—this one creates a policy called "Surface Hubs". Once it’s created, you can apply the same policy to other device accounts.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>$easPolicy = New-MobileDeviceMailboxPolicy -Name “SurfaceHubs” -PasswordEnabled $false</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
$easPolicy = New-MobileDeviceMailboxPolicy -Name “SurfaceHubs” -PasswordEnabled $false
```
Once you have a compatible policy, then you will need to apply the policy to the device account. However, policies can only be applied to user accounts and not resource mailboxes. You need to convert the mailbox into a user type, apply the policy, and then convert it back into a mailbox—you may need to re-enable it and set the password again too.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Set-Mailbox $acctUpn -Type Regular
```PowerShell
Set-Mailbox $acctUpn -Type Regular
Set-CASMailbox &#39;HUB01@contoso.com&#39; -ActiveSyncMailboxPolicy $easPolicy
Set-Mailbox &#39;HUB01@contoso.com&#39; -Type Room
Set-Mailbox &#39;HUB01@contoso.com&#39; -RoomMailboxPassword $credNewAccount.Password -EnableRoomMailboxAccount $true</code></pre></td>
</tr>
</tbody>
</table>
Set-Mailbox &#39;HUB01@contoso.com&#39; -RoomMailboxPassword $credNewAccount.Password -EnableRoomMailboxAccount $true
```
4. Set Exchange properties.
Various Exchange properties must be set on the device account to improve the meeting experience. You can see which properties need to be set in the [Exchange properties](prepare-your-environment-for-surface-hub-how-do-i-exchange-properties.md) section.
Various Exchange properties must be set on the device account to improve the meeting experience. You can see which properties need to be set in the [Exchange properties](exchange-properties-for-surface-hub-device-accounts.md) section.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Set-CalendarProcessing -Identity &#39;HUB01@contoso.com&#39; -AutomateProcessing AutoAccept -AddOrganizerToSubject $false –AllowConflicts $false –DeleteComments $false -DeleteSubject $false -RemovePrivateProperty $false
Set-CalendarProcessing -Identity &#39;HUB01@contoso.com&#39; -AddAdditionalResponse $true -AdditionalResponse &quot;This is a Surface Hub room!&quot;</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
Set-CalendarProcessing -Identity &#39;HUB01@contoso.com&#39; -AutomateProcessing AutoAccept -AddOrganizerToSubject $false –AllowConflicts $false –DeleteComments $false -DeleteSubject $false -RemovePrivateProperty $false
Set-CalendarProcessing -Identity &#39;HUB01@contoso.com&#39; -AddAdditionalResponse $true -AdditionalResponse "This is a Surface Hub room!"
```
5. Add email address for your on-prem domain account.
@ -448,22 +240,9 @@ Use this procedure if you use Exchange online.
You need to connect to Azure AD to apply some account settings. You can run this cmdlet to connect.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Connect-MsolService -Credential $cred</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
Connect-MsolService -Credential $cred
```
8. Assign an Office 365 license.
@ -473,24 +252,11 @@ Use this procedure if you use Exchange online.
Once you list out the SKUs, you can add a license using the `Set-MsolUserLicense` cmdlet. In this case, `$strLicense` is the SKU code that you see (for example, *contoso:STANDARDPACK*).
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Set-MsolUser -UserPrincipalName &#39;HUB01@contoso.com&#39; -UsageLocation &#39;US&#39;
```PowerShell
Set-MsolUser -UserPrincipalName &#39;HUB01@contoso.com&#39; -UsageLocation &#39;US&#39;
Get-MsolAccountSku
Set-MsolUserLicense -UserPrincipalName &#39;HUB01@contoso.com&#39; -AddLicenses $strLicense</code></pre></td>
</tr>
</tbody>
</table>
Set-MsolUserLicense -UserPrincipalName &#39;HUB01@contoso.com&#39; -AddLicenses $strLicense
```
9. Enable the device account with Skype for Business.
@ -503,63 +269,24 @@ Use this procedure if you use Exchange online.
1. Start by creating a remote PowerShell session from a PC.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Import-Module LyncOnlineConnector
```PowerShell
Import-Module LyncOnlineConnector
$cssess=New-CsOnlineSession -Credential $cred
Import-PSSession $cssess -AllowClobber</code></pre></td>
</tr>
</tbody>
</table>
Import-PSSession $cssess -AllowClobber
```
2. To enable your Surface Hub account for Skype for Business Server, run this cmdlet:
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Enable-CsMeetingRoom -Identity $rm -RegistrarPool
&#39;sippoolbl20a04.infra.lync.com&#39; -SipAddressType EmailAddress</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
Enable-CsMeetingRoom -Identity $rm -RegistrarPool
&#39;sippoolbl20a04.infra.lync.com&#39; -SipAddressType EmailAddress
```
If you aren't sure what value to use for the `RegistrarPool` parameter in your environment, you can get the value from an existing Skype for Business user using this cmdlet:
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Get-CsOnlineUser -Identity ‘alice@contoso.com’| fl *registrarpool*</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
Get-CsOnlineUser -Identity ‘alice@contoso.com’| fl *registrarpool*
```
10. Assign Skype for Business license to your Surface Hub account

2
devices/surface-hub/manage-surface-hub-installing-apps.md → devices/surface-hub/install-apps-on-surface-hub.md
View File

@ -19,7 +19,7 @@ Admins can install apps on the device using the Windows Store app available in *
## Using the Store for Business
For apps purchased through the Store for Business, download the Appxbundle, offline license, and the dependencies for the App from the store to a separate PC. Create a provisioning package and copy it to a USB drive. (See [Create a provisioning package](prepare-your-environment-for-surface-hub-create-provisioning-packages-for-certificates.md).) Move the USB drive to the Surface Hub, and install the app on the device using the Settings app.
For apps purchased through the Store for Business, download the Appxbundle, offline license, and the dependencies for the App from the store to a separate PC. Create a provisioning package and copy it to a USB drive. (See [Create a provisioning package](provisioning-packages-for-certificates-surface-hub.md).) Move the USB drive to the Surface Hub, and install the app on the device using the Settings app.
## Related topics

4
devices/surface-hub/intro-to-surface-hub.md
View File

@ -96,7 +96,7 @@ Review these dependencies to make sure Surface Hub features will work in your en
</tr>
<tr class="odd">
<td align="left"><p>Device account</p></td>
<td align="left"><p>The device account is an Active Directory and/or Azure AD account that enables several key features for the Surface Hub. Learn more about device accounts in [Create and test a device account](prepare-your-environment-for-surface-hub-create-and-test-a-device-account.md).</p></td>
<td align="left"><p>The device account is an Active Directory and/or Azure AD account that enables several key features for the Surface Hub. Learn more about device accounts in [Create and test a device account](create-and-test-a-device-account-surface-hub.md).</p></td>
</tr>
<tr class="even">
<td align="left"><p>Exchange and Exchange ActiveSync</p></td>
@ -138,7 +138,7 @@ In some ways, adding your new Surface Hub is just like adding any other Microsof
1. [Prepare your environment for Surface Hub](prepare-your-environment-for-surface-hub.md)
2. [Physically install your Surface Hub device](physically-install-your-surface-hub-device.md)
3. [Run the Surface Hub first-run setup program (OOBE)](set-up-your-surface-hub--configure--first-run-program.md)
3. [Run the Surface Hub first-run setup program (OOBE)](first-run-program-surface-hub.md)
After you have your Surface Hub running in your organization, you’ll need info about:

0
devices/surface-hub/manage-surface-hub-locally-managing-settings.md → devices/surface-hub/manage-settings-with-local-admin-account-surface-hub.md
View File

0
devices/surface-hub/manage-surface-hub-remotely-managing-settings.md → devices/surface-hub/manage-settings-with-mdm-for-surface-hub.md
View File

22
devices/surface-hub/manage-surface-hub.md
View File

@ -161,47 +161,47 @@ Every Surface Hub can be managed locally by an admin who physically logs in to t
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>[Accessibility](manage-surface-hub-accessibility.md)</p></td>
<td align="left"><p>[Accessibility](accessibility-surface-hub.md)</p></td>
<td align="left"><p>Accessibility settings for the Surface Hub can be changed by using the Settings app. You'll find them under <strong>Ease of Access</strong>. Your Surface Hub has the same accessibility options as Windows 10.</p></td>
</tr>
<tr class="even">
<td align="left"><p>[Change the Surface Hub device account](manage-surface-hub-changing-the-device-account.md)</p></td>
<td align="left"><p>[Change the Surface Hub device account](change-surface-hub-device-account.md)</p></td>
<td align="left"><p>You can change the device account in Settings to either add an account if one was not already provisioned, or to change any properties of an account that was already provisioned.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>[Device reset](device-reset.md)</p></td>
<td align="left"><p>[Device reset](device-reset-suface-hub.md)</p></td>
<td align="left"><p>You may wish to reset your Surface Hub.</p></td>
</tr>
<tr class="even">
<td align="left"><p>[Install apps on your Surface Hub](manage-surface-hub-installing-apps.md)</p></td>
<td align="left"><p>[Install apps on your Surface Hub](install-apps-on-surface-hub.md)</p></td>
<td align="left"><p>Admins can install apps can from either the Windows Store or the Windows Store for Business.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>[Manage settings with a local admin account](manage-surface-hub-locally-managing-settings.md)</p></td>
<td align="left"><p>[Manage settings with a local admin account](manage-settings-with-local-admin-account-surface-hub.md)</p></td>
<td align="left"><p>A local admin account will be set up on every Surface Hub as part of the first run program. The only way to change the local admin options that you chose at that time is to reset the device.</p></td>
</tr>
<tr class="even">
<td align="left"><p>[Manage settings with an MDM provider](manage-surface-hub-remotely-managing-settings.md)</p></td>
<td align="left"><p>[Manage settings with an MDM provider](manage-settings-with-mdm-for-surface-hub.md)</p></td>
<td align="left"><p>Surface Hub provides an enterprise management solution to help IT administrators manage policies and business applications on these devices using a mobile device management (MDM) solution.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>[Monitor your Surface Hub](manage-surface-hub-monitoring-your-surface-hubs.md)</p></td>
<td align="left"><p>[Monitor your Surface Hub](monitor-surface-hub.md)</p></td>
<td align="left"><p>Monitoring for Surface Hub devices is enabled through Microsoft Operations Management Suite (OMS).</p></td>
</tr>
<tr class="even">
<td align="left"><p>[Save your BitLocker key](manage-surface-hub-bitlocker.md)</p></td>
<td align="left"><p>[Save your BitLocker key](save-bitlocker-key-surface-hub.md)</p></td>
<td align="left"><p>Every Surface Hub is automatically set up with BitLocker drive encryption software. Microsoft strongly recommends that you make sure you back up your BitLocker recovery keys.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>[Using a room control system](manage-surface-hub-using-serial-control.md)</p></td>
<td align="left"><p>[Using a room control system](use-room-control-system-with-surface-hub.md)</p></td>
<td align="left"><p>Room control systems can be used with your Surface Hub.</p></td>
</tr>
<tr class="even">
<td align="left"><p>[Windows updates](manage-surface-hub-windows-updates.md)</p></td>
<td align="left"><p>[Windows updates](manage-windows-updates-for-surface-hub.md)</p></td>
<td align="left"><p>You can manage Windows updates on your Surface Hub by setting the maintenance window, deferring updates, or using WSUS.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>[Wireless network management](manage-surface-hub-wireless-network-management.md)</p></td>
<td align="left"><p>[Wireless network management](wireless-network-management-for-surface-hub.md)</p></td>
<td align="left"><p>Surface Hub offers two options for network connectivity to your corporate network and Internet: wireless, and wired. While both provide network access, we recommend you use a wired connection.</p></td>
</tr>
</tbody>

0
devices/surface-hub/manage-surface-hub-windows-updates.md → devices/surface-hub/manage-windows-updates-for-surface-hub.md
View File

0
devices/surface-hub/manage-surface-hub-monitoring-your-surface-hubs.md → devices/surface-hub/monitor-surface-hub.md
View File

111
devices/surface-hub/on-premises-deployment-surface-hub-device-accounts.md Normal file
View File

@ -0,0 +1,111 @@
---
title: On-premises deployment (Surface Hub)
description: This topic explains how you add a device account for your Microsoft Surface Hub when you have a single-forest, on-premises deployment.
ms.assetid: 80E12195-A65B-42D1-8B84-ECC3FCBAAFC6
keywords: ["single forest deployment", "on prem deployment", "device account", "Surface Hub"]
author: TrudyHa
---
# On-premises deployment (Surface Hub)
This topic explains how you add a device account for your Microsoft Surface Hub when you have a single-forest, on-premises deployment.
If you have a single-forest on-premises deployment with Microsoft Exchange 2013 or later and Skype for Business 2013 or later, then you can [use the provided PowerShell scripts](appendix-a--powershell.md#create-on-premise-ps-scripts) to create device accounts. If you’re using a multi-forest deployment, or are using Exchange 2010 or Lync 2010, you can use equivalent cmdlets that will produce the same results. Those cmdlets are described in this section.
1. Start a remote PowerShell session from a PC and connect to Exchange.
Be sure you have the right permissions set to run the associated cmdlets.
Note here that `$strExchangeServer` is the fully qualified domain name (FQDN) of your Exchange server, and `$strLyncFQDN` is the FQDN of your Skype for Business server.
```PowerShell
Set-ExecutionPolicy Unrestricted
$org=&#39;contoso.microsoft.com&#39;
$cred=Get-Credential $admin@$org
$sessExchange = New-PSSession -ConfigurationName microsoft.exchange -Credential $cred -AllowRedirection -Authentication Kerberos -ConnectionUri "http://$strExchangeServer/powershell" -WarningAction SilentlyContinue
$sessLync = New-PSSession -Credential $cred -ConnectionURI "https://$strLyncFQDN/OcsPowershell" -AllowRedirection -WarningAction SilentlyContinue
Import-PSSession $sessExchange
Import-PSSession $sessLync
```
2. After establishing a session, you’ll either create a new mailbox and enable it as a RoomMailboxAccount, or change the settings for an existing room mailbox. This will allow the account to authenticate into the Surface Hub.
If you're changing an existing resource mailbox:
```PowerShell
Set-Mailbox -Identity &#39;HUB01&#39; -EnableRoomMailboxAccount $true -RoomMailboxPassword (ConvertTo-SecureString -String <password> -AsPlainText -Force)
```
If you’re creating a new resource mailbox:
```PowerShell
New-Mailbox -UserPrincipalName HUB01@contoso.com -Alias HUB01 -Name "Hub-01" -Room -EnableRoomMailboxAccount $true -RoomMailboxPassword (ConvertTo-SecureString -String <password> -AsPlainText -Force)
```
3. After setting up the mailbox, you will need to either create a new Exchange ActiveSync policy, or use a compatible existing policy.
Surface Hubs are only compatible with device accounts that have an ActiveSync policy where the **PasswordEnabled** property is set to False. If this isn’t set properly, then Exchange services on the Surface Hub (mail, calendar, and joining meetings), will not be enabled.
If you haven’t created a compatible policy yet, use the following cmdlet—this one creates a policy called "Surface Hubs". Once it’s created, you can apply the same policy to other device accounts.
```PowerShell
$easPolicy = New-MobileDeviceMailboxPolicy -Name “SurfaceHubs” -PasswordEnabled $false
```
Once you have a compatible policy, then you will need to apply the policy to the device account. However, policies can only be applied to user accounts and not resource mailboxes. You need to convert the mailbox into a user type, apply the policy, and then convert it back into a mailbox—you may need to re-enable it and set the password again too.
```PowerShell
Set-Mailbox $acctUpn -Type Regular
Set-CASMailbox $acctUpn -ActiveSyncMailboxPolicy $easPolicy
Set-Mailbox $acctUpn -Type Room
Set-Mailbox $credNewAccount.UserName -RoomMailboxPassword $credNewAccount.Password -EnableRoomMailboxAccount $true
```
4. Various Exchange properties can be set on the device account to improve the meeting experience for people. You can see which properties need to be set in the [Exchange properties](exchange-properties-for-surface-hub-device-accounts.md) section.
```PowerShell
Set-CalendarProcessing -Identity $acctUpn -AutomateProcessing AutoAccept -AddOrganizerToSubject $false –AllowConflicts $false –DeleteComments $false -DeleteSubject $false -RemovePrivateProperty $false
Set-CalendarProcessing -Identity $acctUpn -AddAdditionalResponse $true -AdditionalResponse "This is a <tla rid="surface_hub"/> room!"
```
5. If you decide to have the password not expire, you can set that with PowerShell cmdlets too. See [Password management](password-management-for-surface-hub-device-accounts.md) for more information.
```PowerShell
Set-AdUser $acctUpn -PasswordNeverExpires $true
```
6. Enable the account in Active Directory so it will authenticate to the Surface Hub.
```PowerShell
Set-AdUser $acctUpn -Enabled $true
```
7. Enable the device account with Skype for Business by enabling your Surface Hub AD account on a Skype for Business Server pool:
```PowerShell
Enable-CsMeetingRoom -SipAddress "sip:HUB01@contoso.com"
-DomainController DC-ND-001.contoso.com -RegistrarPool LYNCPool15.contoso.com
-Identity HUB01
```
You'll need to use the Session Initiation Protocol (SIP) address and domain controller for the Surface Hub, along with your own Skype for Business Server pool identifier and user identity.
8. OPTIONAL: You can also allow your Surface Hub to make and receive public switched telephone network (PSTN) phone calls by enabling Enterprise Voice for your account. Enterprise Voice isn't a requirement for Surface Hub, but if you want PSTN dialing functionality for the Surface Hub client, here's how to enable it:
```PowerShell
CsMeetingRoom HUB01 -DomainController DC-ND-001.contoso.com
-LineURItel: +14255550555;ext=50555" Set-CsMeetingRoom -DomainController DC-ND-001.contoso.com
-Identity HUB01 -EnterpriseVoiceEnabled $true
```
Again, you'll need to replace the provided domain controller and phone number examples with your own information. The parameter value `$true` stays the same.
 
 

244
devices/surface-hub/prepare-your-environment-for-surface-hub-how-do-i-online-deployment.md → devices/surface-hub/online-deployment-surface-hub-device-accounts.md
View File

@ -17,66 +17,27 @@ If you have a pure, online (O365) deployment, then you can [use the provided Pow
Be sure you have the right permissions set to run the associated cmdlets.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Set-ExecutionPolicy Unrestricted
```PowerShell
Set-ExecutionPolicy Unrestricted
$org=&#39;contoso.microsoft.com&#39;
$cred=Get-Credential $admin@$org
$sess= New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://outlook.office365.com/powershell-liveid/ -Credential $cred -Authentication Basic -AllowRedirection
Import-PSSession $sess</code></pre></td>
</tr>
</tbody>
</table>
Import-PSSession $sess
```
2. After establishing a session, you’ll either create a new mailbox and enable it as a RoomMailboxAccount, or change the settings for an existing room mailbox. This will allow the account to authenticate into the Surface Hub.
If you're changing an existing resource mailbox:
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Set-Mailbox -Identity &#39;HUB01&#39; -EnableRoomMailboxAccount $true -RoomMailboxPassword (ConvertTo-SecureString -String &lt;password&gt; -AsPlainText -Force)</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
Set-Mailbox -Identity &#39;HUB01&#39; -EnableRoomMailboxAccount $true -RoomMailboxPassword (ConvertTo-SecureString -String <password> -AsPlainText -Force)
```
If you’re creating a new resource mailbox:
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>New-Mailbox -MicrosoftOnlineServicesID HUB01@contoso.com -Alias HUB01 -Name &quot;Hub-01&quot; -Room -EnableRoomMailboxAccount $true -RoomMailboxPassword (ConvertTo-SecureString -String &lt;password&gt; -AsPlainText -Force)</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
New-Mailbox -MicrosoftOnlineServicesID HUB01@contoso.com -Alias HUB01 -Name "Hub-01" -Room -EnableRoomMailboxAccount $true -RoomMailboxPassword (ConvertTo-SecureString -String <password> -AsPlainText -Force)
```
3. After setting up the mailbox, you will need to either create a new Exchange ActiveSync policy, or use a compatible existing policy.
@ -84,104 +45,39 @@ If you have a pure, online (O365) deployment, then you can [use the provided Pow
If you haven’t created a compatible policy yet, use the following cmdlet—this one creates a policy called "Surface Hubs". Once it’s created, you can apply the same policy to other device accounts.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>$easPolicy = New-MobileDeviceMailboxPolicy -Name “SurfaceHubs” -PasswordEnabled $false</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
$easPolicy = New-MobileDeviceMailboxPolicy -Name “SurfaceHubs” -PasswordEnabled $false
```
Once you have a compatible policy, then you will need to apply the policy to the device account. However, policies can only be applied to user accounts and not resource mailboxes. You need to convert the mailbox into a user type, apply the policy, and then convert it back into a mailbox—you may need to re-enable it and set the password again too.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Set-Mailbox $acctUpn -Type Regular
```PowerShell
Set-Mailbox $acctUpn -Type Regular
Set-CASMailbox $acctUpn -ActiveSyncMailboxPolicy $easPolicy
Set-Mailbox $acctUpn -Type Room
Set-Mailbox $credNewAccount.UserName -RoomMailboxPassword $credNewAccount.Password -EnableRoomMailboxAccount $true</code></pre></td>
</tr>
</tbody>
</table>
Set-Mailbox $credNewAccount.UserName -RoomMailboxPassword $credNewAccount.Password -EnableRoomMailboxAccount $true
```
4. Various Exchange properties must be set on the device account to improve the meeting experience. You can see which properties need to be set in the [Exchange properties](prepare-your-environment-for-surface-hub-how-do-i-exchange-properties.md) section.
4. Various Exchange properties must be set on the device account to improve the meeting experience. You can see which properties need to be set in the [Exchange properties](exchange-properties-for-surface-hub-device-accounts.md) section.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Set-CalendarProcessing -Identity $acctUpn -AutomateProcessing AutoAccept -AddOrganizerToSubject $false –AllowConflicts $false –DeleteComments $false -DeleteSubject $false -RemovePrivateProperty $false
Set-CalendarProcessing -Identity $acctUpn -AddAdditionalResponse $true -AdditionalResponse &quot;This is a &lt;tla rid=&quot;surface_hub&quot;/&gt; room!&quot;</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
Set-CalendarProcessing -Identity $acctUpn -AutomateProcessing AutoAccept -AddOrganizerToSubject $false –AllowConflicts $false –DeleteComments $false -DeleteSubject $false -RemovePrivateProperty $false
Set-CalendarProcessing -Identity $acctUpn -AddAdditionalResponse $true -AdditionalResponse "This is a <tla rid="surface_hub"/> room!"
```
5. Connect to Azure AD.
You need to connect to Azure AD to apply some account settings. You can run this cmdlet to connect.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Connect-MsolService -Credential $cred</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
Connect-MsolService -Credential $cred
```
6. If you decide to have the password not expire, you can set that with PowerShell cmdlets too. See [Password management](prepare-your-environment-for-surface-hub-how-do-i-password-management.md) for more information.
6. If you decide to have the password not expire, you can set that with PowerShell cmdlets too. See [Password management](password-management-for-surface-hub-device-accounts.md) for more information.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Set-MsolUser -UserPrincipalName $acctUpn -PasswordNeverExpires $true</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
Set-MsolUser -UserPrincipalName $acctUpn -PasswordNeverExpires $true
```
7. The device account needs to have a valid Office 365 (O365) license, or Exchange and Skype for Business will not work. If you have the license, you need to assign a usage location to your device account—this determines what license SKUs are available for your account.
@ -189,24 +85,11 @@ If you have a pure, online (O365) deployment, then you can [use the provided Pow
Once you list out the SKUs, you can add a license using the `Set-MsolUserLicense` cmdlet. In this case, `$strLicense` is the SKU code that you see (for example, *contoso:STANDARDPACK*).
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Set-MsolUser -UserPrincipalName $acctUpn -UsageLocation &quot;US&quot;
```PowerShell
Set-MsolUser -UserPrincipalName $acctUpn -UsageLocation "US"
Get-MsolAccountSku
Set-MsolUserLicense -UserPrincipalName $acctUpn -AddLicenses $strLicense</code></pre></td>
</tr>
</tbody>
</table>
Set-MsolUserLicense -UserPrincipalName $acctUpn -AddLicenses $strLicense
```
8. Enable the device account with Skype for Business.
@ -219,63 +102,24 @@ If you have a pure, online (O365) deployment, then you can [use the provided Pow
1. Start by creating a remote PowerShell session from a PC.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Import-Module LyncOnlineConnector
```PowerShell
Import-Module LyncOnlineConnector
$cssess=New-CsOnlineSession -Credential $cred
Import-PSSession $cssess -AllowClobber</code></pre></td>
</tr>
</tbody>
</table>
Import-PSSession $cssess -AllowClobber
```
2. To enable your Surface Hub account for Skype for Business Server, run this cmdlet:
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Enable-CsMeetingRoom -Identity $rm -RegistrarPool
&quot;sippoolbl20a04.infra.lync.com&quot; -SipAddressType EmailAddress</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
Enable-CsMeetingRoom -Identity $rm -RegistrarPool
"sippoolbl20a04.infra.lync.com" -SipAddressType EmailAddress
```
If you aren't sure what value to use for the `RegistrarPool` parameter in your environment, you can get the value from an existing Skype for Business user using this cmdlet:
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Get-CsOnlineUser -Identity ‘alice@contoso.microsoft.com’| fl *registrarpool*</code></pre></td>
</tr>
</tbody>
</table>
```PowerShell
Get-CsOnlineUser -Identity ‘alice@contoso.microsoft.com’| fl *registrarpool*
```
9. Assign Skype for Business license to your Surface Hub account.

0
devices/surface-hub/prepare-your-environment-for-surface-hub-how-do-i-password-management.md → devices/surface-hub/password-management-for-surface-hub-device-accounts.md
View File

241
devices/surface-hub/prepare-your-environment-for-surface-hub-how-do-i-on-premises-deployment.md
View File

@ -1,241 +0,0 @@
---
title: On-premises deployment (Surface Hub)
description: This topic explains how you add a device account for your Microsoft Surface Hub when you have a single-forest, on-premises deployment.
ms.assetid: 80E12195-A65B-42D1-8B84-ECC3FCBAAFC6
keywords: ["single forest deployment", "on prem deployment", "device account", "Surface Hub"]
author: TrudyHa
---
# On-premises deployment (Surface Hub)
This topic explains how you add a device account for your Microsoft Surface Hub when you have a single-forest, on-premises deployment.
If you have a single-forest on-premises deployment with Microsoft Exchange 2013 or later and Skype for Business 2013 or later, then you can [use the provided PowerShell scripts](appendix-a--powershell.md#create-on-premise-ps-scripts) to create device accounts. If you’re using a multi-forest deployment, or are using Exchange 2010 or Lync 2010, you can use equivalent cmdlets that will produce the same results. Those cmdlets are described in this section.
1. Start a remote PowerShell session from a PC and connect to Exchange.
Be sure you have the right permissions set to run the associated cmdlets.
Note here that `$strExchangeServer` is the fully qualified domain name (FQDN) of your Exchange server, and `$strLyncFQDN` is the FQDN of your Skype for Business server.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Set-ExecutionPolicy Unrestricted
$org=&#39;contoso.microsoft.com&#39;
$cred=Get-Credential $admin@$org
$sessExchange = New-PSSession -ConfigurationName microsoft.exchange -Credential $cred -AllowRedirection -Authentication Kerberos -ConnectionUri &quot;http://$strExchangeServer/powershell&quot; -WarningAction SilentlyContinue
$sessLync = New-PSSession -Credential $cred -ConnectionURI &quot;https://$strLyncFQDN/OcsPowershell&quot; -AllowRedirection -WarningAction SilentlyContinue
Import-PSSession $sessExchange
Import-PSSession $sessLync</code></pre></td>
</tr>
</tbody>
</table>
2. After establishing a session, you’ll either create a new mailbox and enable it as a RoomMailboxAccount, or change the settings for an existing room mailbox. This will allow the account to authenticate into the Surface Hub.
If you're changing an existing resource mailbox:
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Set-Mailbox -Identity &#39;HUB01&#39; -EnableRoomMailboxAccount $true -RoomMailboxPassword (ConvertTo-SecureString -String &lt;password&gt; -AsPlainText -Force)</code></pre></td>
</tr>
</tbody>
</table>
If you’re creating a new resource mailbox:
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>New-Mailbox -UserPrincipalName HUB01@contoso.com -Alias HUB01 -Name &quot;Hub-01&quot; -Room -EnableRoomMailboxAccount $true -RoomMailboxPassword (ConvertTo-SecureString -String &lt;password&gt; -AsPlainText -Force)</code></pre></td>
</tr>
</tbody>
</table>
3. After setting up the mailbox, you will need to either create a new Exchange ActiveSync policy, or use a compatible existing policy.
Surface Hubs are only compatible with device accounts that have an ActiveSync policy where the **PasswordEnabled** property is set to False. If this isn’t set properly, then Exchange services on the Surface Hub (mail, calendar, and joining meetings), will not be enabled.
If you haven’t created a compatible policy yet, use the following cmdlet—this one creates a policy called "Surface Hubs". Once it’s created, you can apply the same policy to other device accounts.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>$easPolicy = New-MobileDeviceMailboxPolicy -Name “SurfaceHubs” -PasswordEnabled $false</code></pre></td>
</tr>
</tbody>
</table>
Once you have a compatible policy, then you will need to apply the policy to the device account. However, policies can only be applied to user accounts and not resource mailboxes. You need to convert the mailbox into a user type, apply the policy, and then convert it back into a mailbox—you may need to re-enable it and set the password again too.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Set-Mailbox $acctUpn -Type Regular
Set-CASMailbox $acctUpn -ActiveSyncMailboxPolicy $easPolicy
Set-Mailbox $acctUpn -Type Room
Set-Mailbox $credNewAccount.UserName -RoomMailboxPassword $credNewAccount.Password -EnableRoomMailboxAccount $true</code></pre></td>
</tr>
</tbody>
</table>
4. Various Exchange properties can be set on the device account to improve the meeting experience for people. You can see which properties need to be set in the [Exchange properties](prepare-your-environment-for-surface-hub-how-do-i-exchange-properties.md) section.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Set-CalendarProcessing -Identity $acctUpn -AutomateProcessing AutoAccept -AddOrganizerToSubject $false –AllowConflicts $false –DeleteComments $false -DeleteSubject $false -RemovePrivateProperty $false
Set-CalendarProcessing -Identity $acctUpn -AddAdditionalResponse $true -AdditionalResponse &quot;This is a &lt;tla rid=&quot;surface_hub&quot;/&gt; room!&quot;</code></pre></td>
</tr>
</tbody>
</table>
5. If you decide to have the password not expire, you can set that with PowerShell cmdlets too. See [Password management](prepare-your-environment-for-surface-hub-how-do-i-password-management.md) for more information.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Set-AdUser $acctUpn -PasswordNeverExpires $true</code></pre></td>
</tr>
</tbody>
</table>
6. Enable the account in Active Directory so it will authenticate to the Surface Hub.
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Set-AdUser $acctUpn -Enabled $true</code></pre></td>
</tr>
</tbody>
</table>
7. Enable the device account with Skype for Business by enabling your Surface Hub AD account on a Skype for Business Server pool:
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>Enable-CsMeetingRoom -SipAddress &quot;sip:HUB01@contoso.com&quot;
-DomainController DC-ND-001.contoso.com -RegistrarPool LYNCPool15.contoso.com
-Identity HUB01</code></pre></td>
</tr>
</tbody>
</table>
You'll need to use the Session Initiation Protocol (SIP) address and domain controller for the Surface Hub, along with your own Skype for Business Server pool identifier and user identity.
8. OPTIONAL: You can also allow your Surface Hub to make and receive public switched telephone network (PSTN) phone calls by enabling Enterprise Voice for your account. Enterprise Voice isn't a requirement for Surface Hub, but if you want PSTN dialing functionality for the Surface Hub client, here's how to enable it:
<span codelanguage="PowerShell"></span>
<table>
<colgroup>
<col width="100%" />
</colgroup>
<thead>
<tr class="header">
<th align="left">PowerShell</th>
</tr>
</thead>
<tbody>
<tr class="odd">
<td align="left"><pre><code>CsMeetingRoom HUB01 -DomainController DC-ND-001.contoso.com
-LineURItel: +14255550555;ext=50555&quot; Set-CsMeetingRoom -DomainController DC-ND-001.contoso.com
-Identity HUB01 -EnterpriseVoiceEnabled $true</code></pre></td>
</tr>
</tbody>
</table>
Again, you'll need to replace the provided domain controller and phone number examples with your own information. The parameter value `$true` stays the same.
 
 

20
devices/surface-hub/prepare-your-environment-for-surface-hub.md
View File

@ -14,7 +14,7 @@ This section contains an overview of the steps required to prepare your environm
## Create and test a device account
A "device account" is an account that Surface Hub uses in order to access features from Exchange, like email and calendar, and to enable Skype for Business. See [Create and test a device account](prepare-your-environment-for-surface-hub-create-and-test-a-device-account.md) for details.
A "device account" is an account that Surface Hub uses in order to access features from Exchange, like email and calendar, and to enable Skype for Business. See [Create and test a device account](create-and-test-a-device-account-surface-hub.md) for details.
## Check network availability
@ -34,12 +34,12 @@ A wired connection is preferred.
Your Surface Hub may require certificates for ActiveSync, Skype for Business, network usage, or other authentication. To install certificates, you can either create a provisioning package (in order to install at first run, or after first run in Settings), or deploy them through a mobile device management (MDM) solution (after first run only).
To install certificates using provisioning packages, see [Create provisioning packages](prepare-your-environment-for-surface-hub-create-provisioning-packages-for-certificates.md). To install them using MDM, see the documentation for your MDM solution.
To install certificates using provisioning packages, see [Create provisioning packages](provisioning-packages-for-certificates-surface-hub.md). To install them using MDM, see the documentation for your MDM solution.
## Create provisioning packages
Currently, Surface Hub can use provisioning packages only to install certificates and to install Universal Windows Platform (UWP) apps. See [Create provisioning packages](prepare-your-environment-for-surface-hub-create-provisioning-packages-for-certificates.md) for details.
Currently, Surface Hub can use provisioning packages only to install certificates and to install Universal Windows Platform (UWP) apps. See [Create provisioning packages](provisioning-packages-for-certificates-surface-hub.md) for details.
Customers will use provisioning packages to authenticate (for example, to Exchange or Skype for Business), or to sideload apps that don't come from the Windows Store or Windows Store for Business.
@ -50,7 +50,7 @@ You should know which Exchange server the device account will use for email and
### Admin group management
Every Surface Hub can be configured individually by opening the Settings app on the device. To prevent people who are not administrators from changing settings, the Settings app requires local administrator credentials to open the app and change settings. See [Admin group management](prepare-your-environment-for-surface-hub-admin-group-management.md) for details on how admin groups are set up and managed.
Every Surface Hub can be configured individually by opening the Settings app on the device. To prevent people who are not administrators from changing settings, the Settings app requires local administrator credentials to open the app and change settings. See [Admin group management](admin-group-management-for-surface-hub.md) for details on how admin groups are set up and managed.
## Skype for Business
@ -83,9 +83,9 @@ In order to ensure that your environment is ready for the Surface Hub, verify th
- Telemetry client endpoint: https://vortex.data.microsoft.com/
- Telemetry settings endpoint: https://settings.data.microsoft.com/
4. Choose the local admin method you want to set up during first run (see [Set up admins for this device](set-up-your-surface-hub--configure--first-run-program.md#setup-admins)). Also, decide whether you'll be using MDM (see [Manage settings with an MDM provider](manage-surface-hub-remotely-managing-settings.md)).
5. You've created provisioning packages, as needed. See [Create provisioning packages](prepare-your-environment-for-surface-hub-create-provisioning-packages-for-certificates.md).
6. Have all necessary information available from the [Setup worksheet](prepare-your-environment-for-surface-hub-setup-worksheet.md).
4. Choose the local admin method you want to set up during first run (see [Set up admins for this device](set-up-your-surface-hub--configure--first-run-program.md#setup-admins)). Also, decide whether you'll be using MDM (see [Manage settings with an MDM provider](manage-settings-with-mdm-for-surface-hub.md)).
5. You've created provisioning packages, as needed. See [Create provisioning packages](provisioning-packages-for-certificates-surface-hub.md).
6. Have all necessary information available from the [Setup worksheet](setup-worksheet-surface-hub.md).
## In this section
@ -103,15 +103,15 @@ In order to ensure that your environment is ready for the Surface Hub, verify th
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>[Create and test a device account](prepare-your-environment-for-surface-hub-create-and-test-a-device-account.md)</p></td>
<td align="left"><p>[Create and test a device account](create-and-test-a-device-account-surface-hub.md)</p></td>
<td align="left"><p>This topic introduces how to create and test the device account that Surface Hub uses to communicate with and Skype.</p></td>
</tr>
<tr class="even">
<td align="left"><p>[Create provisioning packages](prepare-your-environment-for-surface-hub-create-provisioning-packages-for-certificates.md)</p></td>
<td align="left"><p>[Create provisioning packages](provisioning-packages-for-certificates-surface-hub.md)</p></td>
<td align="left"><p>For Windows 10, settings that use the registry or a content services platform (CSP) can be configured using provisioning packages. You can also add certificates during first run using provisioning.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>[Admin group management](prepare-your-environment-for-surface-hub-admin-group-management.md)</p></td>
<td align="left"><p>[Admin group management](admin-group-management-for-surface-hub.md)</p></td>
<td align="left"><p>Every Surface Hub can be configured individually by opening the Settings app on the device. However, to prevent people who are not administrators from changing the settings, the Settings app requires administrator credentials to open the app and change settings.</p>
<p>The Settings app requires local administrator credentials to open the app.</p></td>
</tr>

0
devices/surface-hub/prepare-your-environment-for-surface-hub-create-provisioning-packages-for-certificates.md → devices/surface-hub/provisioning-packages-for-certificates-surface-hub.md
View File

0
devices/surface-hub/manage-surface-hub-bitlocker.md → devices/surface-hub/save-bitlocker-key-surface-hub.md
View File

6
devices/surface-hub/set-up-your-surface-hub--configure-.md → devices/surface-hub/set-up-your-surface-hub.md
View File

@ -11,7 +11,7 @@ author: TrudyHa
Set up instructions for Surface Hub include a setup worksheet, and a walkthrough of the first-run program.
Before you turn on your Microsoft Surface Hub for the first time, make sure you've completed the checklist at the end of the [Prepare your environment for Surface Hub](prepare-your-environment-for-surface-hub.md) section, and that you have the information listed in the [Setup worksheet](prepare-your-environment-for-surface-hub-setup-worksheet.md). When you do power it on, the device will walk you through a series of setup screens. If you haven't properly set up your environment, or don't have the required information, you'll have to do extra work afterward making sure the settings are correct.
Before you turn on your Microsoft Surface Hub for the first time, make sure you've completed the checklist at the end of the [Prepare your environment for Surface Hub](prepare-your-environment-for-surface-hub.md) section, and that you have the information listed in the [Setup worksheet](setup-worksheet-surface-hub.md). When you do power it on, the device will walk you through a series of setup screens. If you haven't properly set up your environment, or don't have the required information, you'll have to do extra work afterward making sure the settings are correct.
## In this section
@ -29,11 +29,11 @@ Before you turn on your Microsoft Surface Hub for the first time, make sure you'
</thead>
<tbody>
<tr class="odd">
<td align="left"><p>[Setup worksheet](prepare-your-environment-for-surface-hub-setup-worksheet.md)</p></td>
<td align="left"><p>[Setup worksheet](setup-worksheet-surface-hub.md)</p></td>
<td align="left"><p>When you've finished pre-setup and are ready to start first-time setup for your Surface Hub, make sure you have all the information listed in this section.</p></td>
</tr>
<tr class="even">
<td align="left"><p>[First-run program](set-up-your-surface-hub--configure--first-run-program.md)</p></td>
<td align="left"><p>[First-run program](first-run-program-surface-hub.md)</p></td>
<td align="left"><p>The term &quot;first run&quot; refers to the series of steps you'll go through the first time you power up your Surface Hub, and means the same thing as &quot;out-of-box experience&quot; (OOBE). This section will walk you through the process.</p></td>
</tr>
</tbody>

2
devices/surface-hub/prepare-your-environment-for-surface-hub-setup-worksheet.md → devices/surface-hub/setup-worksheet-surface-hub.md
View File

@ -99,7 +99,7 @@ admin1, \#MyPassw0rd
USB drive
If you know before first run that you want to install certificates or universal apps, follow the steps in [Create provisioning packages](prepare-your-environment-for-surface-hub-create-provisioning-packages-for-certificates.md). Your provisioning packages will be created on a USB drive.
If you know before first run that you want to install certificates or universal apps, follow the steps in [Create provisioning packages](provisioning-packages-for-certificates-surface-hub.md). Your provisioning packages will be created on a USB drive.
 

6
devices/surface-hub/surface-hub-administrators-guide.md
View File

@ -11,7 +11,7 @@ author: TrudyHa
This guide covers the installation and administration of devices running Surface Hub, and is intended for use by anyone responsible for these tasks, including IT administrators and developers.
Before you power on Microsoft Surface Hub for the first time, make sure you've [completed the checklist](prepare-your-environment-for-surface-hub.md#prepare-checklist) at the end of the [Prepare your environment for Surface Hub](prepare-your-environment-for-surface-hub.md) section, and that you have the information listed in the [Setup worksheet](prepare-your-environment-for-surface-hub-setup-worksheet.md). When you do power it on, the device will walk you through a series of setup screens. If you haven't properly set up your environment, or don't have the required information, you'll have to do extra work afterward making sure the settings are correct.
Before you power on Microsoft Surface Hub for the first time, make sure you've [completed the checklist](prepare-your-environment-for-surface-hub.md#prepare-checklist) at the end of the [Prepare your environment for Surface Hub](prepare-your-environment-for-surface-hub.md) section, and that you have the information listed in the [Setup worksheet](setup-worksheet-surface-hub.md). When you do power it on, the device will walk you through a series of setup screens. If you haven't properly set up your environment, or don't have the required information, you'll have to do extra work afterward making sure the settings are correct.
## In this section
@ -41,7 +41,7 @@ Before you power on Microsoft Surface Hub for the first time, make sure you've [
<td align="left"><p>This section contains an overview of the steps required to prepare your environment so that you can use all of the features of Surface Hub. See [Intro to Surface Hub](intro-to-surface-hub.md) for a description of how the device and its features interact with your IT environment.</p></td>
</tr>
<tr class="even">
<td align="left"><p>[Set up Microsoft Surface Hub](set-up-your-surface-hub--configure-.md)</p></td>
<td align="left"><p>[Set up Microsoft Surface Hub](set-up-your-surface-hub.md)</p></td>
<td align="left"><p>Set up instructions for Surface Hub include a setup worksheet, and a walkthrough of the first-run program.</p></td>
</tr>
<tr class="odd">
@ -53,7 +53,7 @@ Before you power on Microsoft Surface Hub for the first time, make sure you've [
<td align="left"><p>Troubleshoot common problems, including setup issues, Exchange ActiveSync errors.</p></td>
</tr>
<tr class="odd">
<td align="left"><p>[Appendix: PowerShell](appendix-a--powershell.md)</p></td>
<td align="left"><p>[Appendix: PowerShell](appendix-a-powershell-scripts-for-surface-hub.md)</p></td>
<td align="left"><p>PowerShell scripts to help set up and manage your Surface Hub .</p></td>
</tr>
</tbody>

2
devices/surface-hub/troubleshoot-surface-hub.md
View File

@ -54,7 +54,7 @@ Calendar is not showing on the Welcome screen or message "Appointments of date (
The device account's password has expired and is no longer valid.
Update the account's password in Settings. Also see [Password management](prepare-your-environment-for-surface-hub-how-do-i-password-management.md).
Update the account's password in Settings. Also see [Password management](password-management-for-surface-hub-device-accounts.md).
Calendar is not showing on the Welcome screen or message "Appointments of date (account policy)" is being displayed.

0
devices/surface-hub/manage-surface-hub-using-serial-control.md → devices/surface-hub/use-room-control-system-with-surface-hub.md
View File

0
devices/surface-hub/manage-surface-hub-wireless-network-management.md → devices/surface-hub/wireless-network-management-for-surface-hub.md
View File