Building Skype for Business Server 2019 

Just do it in AD users and computers. Add the user to the csadministrators group and you're all good.

Sorry for the late reply. That lab was running on my iMac Pro in Parallels. I use The 'pro for most of my development work and have a couple of Mac Mini units to run my live stuff. My laptop can run the whole demo set of DC, Skype, Exchange and a Windoes 10 client.

@@MacRS4 Just realised I never replied to you on this. Thanks for lab description, I finally bit the bullet and just built my own "server" with desktop PC parts.

Have you run the first time installation? Top right option on the main deployment screen.

It won't work/isn't supported on a domain controller. If it's production it needs to be a SfB server only - it doesn't play well with other workloads.

Domain and enterprise admin for the AD bits. Then local admin and member of csAdministrators for the rest. If enterprise you need SA rights to the DB too.

@@MacRS4 Thanks. I hope it is not risky and doesn't mess up production AD.

@@aliweb I've done hundreds and its not gone wrong yet. The horror stories seem to stem from the days when schema updates would overwrite existing attributes. The SfB ones are the same as Lync, and dont cross with things like exchange. I always make sure I have backups though.

​@@MacRS4 Thanks for the quick replies. So just to be clear we can create a new user account for e.g. "SFBAdmin" which will be part of local admin group on SFB server. I don't want to use domain administrator unless it is absolutely necessary. Then we need to login on SFB server as domain administrator and click on "Prepare Active Directory" which will perform several operations including creating a new AD group called "CSAdministrator". Then we will add "SFBAdmin" into "CSAdministrator" group. Then we will logout as domain administrator and login on SFB server as "SFBAdmin" and perform rest of the operations. Am I correct?

@@aliweb sorry completely missed this. Pretty much yes. You need rights to AD for the AD bits, admin rights to the server for install, and a member of the csAdmin group. It's how we allow skype admins without giving people general admin rights. Have a look at the RBAC docs - explains all the groups. Sometimes you may need to add the install user to rtcuniversalserveradmins (or similar names... out and about so hard to look) as the installer fails. Also you need rights to sql for the user too.

I didn't - it's a separate server,

@@MacRS4 did you login with a local account or a domain admin account?

Robin Kos domain admin account.

You need an access edge and reverse proxy for mobile clients. You can get away with just the reverse proxy.

@@MacRS4 How do you get away with just using a reverse proxy for mobile users? I'm looking to have internal and external users connect to our SFB2019 front end server using HAProxy, if possible. Would it be possible? Is there a tutorial?

@@jeffs5557 Hi - it is possible, but if you cant support hair pinning on your firewall you have to put in an internal reverse proxy too. A bit of a pain but doable.

@@jeffs5557 sorry, think I misunderstood your question. If you want mobile or any users external you must have an edge. My reference to getting away with just a RP was for internal clients only. So mobile on internal wifi via RP to pool. Bit of a hack but works if you cant do hair pinning on your fw or proxy.

.151 if the SfB Server.

MacDoesStuff thanks. Your video helped me a lot !

You can download 2019 from here now: www.microsoft.com/en-us/evalcenter/evaluate-skype-business-server-2019

Apply what on the domain controller? You cannot install SfB on a DC.

@@MacRS4 Thanks Pro