Summary
During installation and initial configuration, Cayosoft Administrator performs various pre-installation checks to ensure all required components are installed and system settings are configured properly. However, there is the possibility that some settings may have been updated after the Cayosoft Administrator installation, or some settings were not properly verified during installation. This article provides an extensive set of verification procedures to ensure the system where Cayosoft Administration Service is installed and configured properly.
Published: January 14, 2014
Updated: 12/1/2015
Applies to: Cayosoft Administrator 3.x or later
In this article:
Typical error messages
Issue | Requirements |
---|---|
Office 365 connection account password issues |
|
|
|
Office 365 connection account issues |
|
|
|
|
|
|
|
Exchange Online connection issues |
|
|
|
|
For resolution, please see step-by-step instructions in section 1.7. |
|
|
Skype Online connection issues |
|
|
|
1. Verify Office 365 connection account
1.1 Check Office 365 settings in the Cayosoft Administrator Console
Requirements
- Office 365 extension must be enabled.
- Valid Office 365 credentials must be provided as an Office 365 connection account.
- Check Settings and the Run Components Check and resolve any reported errors.
How to check
- In the Cayosoft Administrator console, navigate to Microsoft Office 365 Extension.
- Check the Office 365 credentials filed - this is the Administrator Account being used to connect to Office 365. There are several steps listed below to verify this account is configured properly.
- Click the Check Settings command from the menu in the right pane and confirm it completes without an error.
- Run the Run Components Check and confirm all required components are installed.
1.2 Set a new password for Office 365 connection account
Requirement
- Credentials provided for Office 365 connection account must be valid to log on to Microsoft Online Portal.
How to check
- Open Office 365 Admin Panel and reset the password for Office 365 connection account. Make sure to clear the checkbox Make this user change their password when they first sign in:
- Log on to https://portal.office.com with the new password for Office 365 connection account, to make sure these credentials would be valid.
- Open Cayosoft Administrator Console
- Click [...] button next to the account
- Specify a new password for Office 365 connection account
- Restart Administration Service to make sure all sessions are fully re-established:
Optionally set the account password to never expire
By default passwords for all accounts in Office 365 are set to expire.
You can change that and set the account password to never expire. Office 365 native Admin Center does not provide a user interface for this, so you have 2 options:
- Do it in PowerShell, as described for example here: https://support.office.com/en-us/article/set-an-individual-user-s-password-to-never-expire-f493e3af-e1d8-4668-9211-230c245a0466
- Do it in Cayosoft Administrator Web UI, after you reset the password and make the Cayosoft Administrator work again. So, after Cayosoft Administrator re-establishes the connection to Office 365:
- Open Web UI
- Navigate to Microsoft Office 365 -> Active Users
- Search for the connection account used to connect to Office 365
- Click Reset Password action
- Check Password never expires
1.3 Check if Office 365 connection account is a cloud-only account
Requirement
- Office 365 connection account should be a cloud-only account, i.e. an account that is not synchronized with Azure AD Connect.
How to resolve
- Navigate to https://login.microsoftonline.com
- Open Office 365 Admin Center, open the list of Active users and locate the Office 365 connection account in the list. Make sure the Sync Type column states "In cloud" for the account, as shown on the screenshot below.
1.4 Exclude Office 365 connection account from MFA enforcement
Requirement
- Office 365 connection account should be excluded from MFA enforcement
How to resolve
Starting with version 7.1.0, Cayosoft Administrator can automatically validate Office 365 connection account, but additional configuration steps are required for Cayosoft Administrator to work correctly in such an environment:
- In Cayosoft Administrator Console navigate to Home > Configuration > Connected Systems Extensions > Microsoft Office 365
- Click ... button next to Office 365 credentials
- On Specify Credentials window click Validate
- Perform the steps described in this KB: https://cayosoft.zendesk.com/hc/en-us/articles/360040408252
If you use Cayosoft Administrator 7.0.0 or earlier or Office 365 connection account could not be configured automatically, please follow the instructions for manual configuration: https://cayosoft.zendesk.com/hc/en-us/articles/360039211412
1.5 Verify Office 365 role for the Office 365 connection account
Requirement
- Office 365 connection account must be assigned a Global administrator role in Office 365 (Azure AD). For more details, please see Permissions required for AD and Office 365 accounts used by Cayosoft Administrator article.
How to check
- In the Office 365 Admin Portal, select the account you intend to use as the connection account for Cayosoft Administrator.
- Open Roles dialog for the selected account
- Make sure the Global administrator role is assigned, as shown on the screenshot below.
- See Microsoft KB http://support.microsoft.com/kb/2905767 for details on ensuring the administrative account has Office 365 Administrative Credentials.
1.6 Verify Exchange Online roles for the Office 365 connection account
Requirement
- Office 365 connection account must be a member of the Organization Management role in Exchange Online.
How to check
- In the Office 365 Admin Portal, expand Admin centers navigation group and select Exchange to go to Exchange Admin Center
- Select Permissions section in the Exchange Admin Center
- On the Admin Roles tab, select "Organization Management" role and click Edit
- Make sure the Office 365 connection account is listed in the Members list for the "Organization Management" role, as shown on the screenshot below.
Note: In some tenants, the Organization Management role is configured to have a TenantAdmins_<Number> ("Company Administrator") admin role as a member. In that case, select the TenantAdmins_<Number> role in the list and make sure the Office 365 connection account is listed as its member in the right pane.
1.7 Resolution for the Data returned by the remote Get-FormatData command is not in the expected format error
This is a known issue related to Exchange Online sessions introduced by Microsoft. It appears only on some Office 365 tenants. Cayosoft Administrator re-creates Exchange Online sessions on start and then after they are expired. Due to this problem, new Exchange sessions can not be recreated. For more details, please read this post: https://answers.microsoft.com/en-us/msoffice/forum/all/cannot-connect-to-exchange-online-via-powershell/25ca1cc2-e23a-470e-9c73-e6c56c4fbb46?page=5
According to the post, this issue can go away after some time. But in 7.3.0 version new Apply fix for Get-FormatData error setting was added in the Advanced Settings section in Microsoft Office 365 extension:
- In Admin Console navigate to Home > Configuration > Connected Systems Extensions > Microsoft Office 365
- Expand Advanced Settings section
- Set Apply fix for Get-FormatData error to Try 2nd workaround
- Click Save Changes
- Restart Cayosoft Service
If the issue still is not resolved, select Try 1st workaround in step 3.
2. Verify Required Software Components and System Settings
2.1 Verify required Software components
Requirement
- The MSOnline PowerShell for Azure AD and Azure AD PowerShell for Graph components are required for Cayosoft Administrator to connect to and manage Microsoft Azure Active Directory and Microsoft Office 365.
How to check
- On the system where Administration Service is deployed, run the Cayosoft Requirements Check from the Start menu
- Make sure both components are marked as <Installed>: MSOnline PowerShell for Azure Active Directory and Azure Active Directory PowerShell for Graph. See the screenshot below.
2.2 Verify PowerShell remoting is enabled
Requirement
- PowerShell Remoting must be enabled.
How to check
-
Click Start (or press the Windows flag key). The windows start menu or start screen should appear.
-
Type PowerShell ISE then press ENTER. The PowerShell ISE editor will appear on the screen.
- In the PowerShell ISE Window do the following:
- Type Enter-PSSession –computername localhost then press ENTER
- No warnings or messages should appear, only the command prompt should be visible, as shown on the screenshot below.
How to resolve
- If a warning message appears you will need to enable PowerShell Remoting by running the Enable-psremoting command.
2.3 Verify PowerShell Execution Policy is Unrestricted or RemoteSigned
Requirement
-
PowerShell Execution Policy must be set to Unrestricted or RemoteSigned.
How to check
- In the PowerShell ISE Window do the following
- Type get-ExecutionPolicy then press ENTER
- A value of Unrestricted or RemoteSigned should be returned, as shown on the screenshot below
How to resolve
- If the system does not return Unrestricted or RemoteSigned then use the command set-executionpolicy remotesigned to set the policy
2.4 Verify Windows Remoting (WINRM) is Enabled
Requirement
- Windows Remoting service must be started.
How to check
- In the PowerShell ISE Window do the following
- Type Get-service winrm then press ENTER
- You should see the message displayed below
How to resolve
- If the system indicates WINRM is not running then use the command net start winrm to start the service.
2.5 Verify Basic Authentication is Enabled for Windows Remoting (WINRM)
Requirement
- Basic Authentication must be enabled for Windows Remoting on the machine running the Cayosoft Administrator.
How to check
- In the PowerShell ISE Window do the following
- Type winrm get winrm/config/client/auth then press ENTER. You should see the message as on the screenshot below. Notice that Basic must be set to "true".
How to resolve
- If Basic = false is displayed, then use the command winrm set winrm/config/service/auth '@{Basic="true"}' to enable Basic Authentication
3. Test Connection
3.1 Test Office 365 Connection Outside of Cayosoft Administrator
To eliminate the possibility that Firewall, Proxy, PowerShell or other Environmental Problems are preventing the Cayosoft Administrator to connect to Office 365, perform the following tasks:
- Click Start (or press the Windows flag key). The windows start menu or start screen should appear.
- Type PowerShell ISE then press ENTER. The PowerShell ISE editor will appear on the screen.
- Type $Office365_Credentials = Get-Credential then press ENTER
- You will be prompted for a username and password. Enter the account and password of the Global Admin account you will use as the connection account for Cayosoft Administrator then click OK.
- You will be prompted for a username and password. Enter the account and password of the Global Admin account you will use as the connection account for Cayosoft Administrator then click OK.
- Type connect-msolservice -credential $Office365 Credentials then press ENTER.
- If you see a warning appear that your Microsoft Online Service Module is out of date, you should update it after you have completed this test.
- Type $Session_Exch = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershell/ -Credential $Office365_Credentials -Authentication Basic -AllowRedirection then press ENTER
- You should see a prompt with text similar to:
WARNING: Your connection has been redirected to the following URI: "https://pod51044psh.outlook.com/powershell-liveid?PSVersion=3.0 "
- You should see a prompt with text similar to:
- Type Import-PSSession $Session_Exch then press ENTER
- You may see text similar to indicating a successful connection has been established:
WARNING: The names of some imported commands from the module 'tmp_aa015xtf.uot' include unapproved verbs that might make them less discoverable. To find the commands with unapproved verbs, run the Import-Module command again with the Verbose parameter. For a list of approved verbs, type Get-Verb.
ModuleType Name ExportedCommands
---------- ---- ----------------
Script tmp_aa015xtf.uot {Add-AvailabilityAddressSpace, Add-DistributionGroupMember, Add-MailboxFolderPermission, Add-MailboxPermission...}
- You may see text similar to indicating a successful connection has been established:
3.2 Next Steps
If the connect was successful, but you still experience problems, please contact Cayosoft Support for additional assistance.
If the connection failed please verify that Antivirus, Firewall or Proxy Settings are not preventing this computer from connecting to Office 365.
4. Maximum number of Exchange Online connections exceeded
You may get the error due to the limitation of a number of sessions to Exchange Online. A maximum of three simultaneous remote PowerShell connections to Exchange Online Organization is allowed. You should wait for 30 minutes, after that the sessions that are not used would be closed and the error won't be displayed. For more details, please see this Microsoft article.
5. Maximum number of Skype Online connections exceeded
How to resolve
You may get the error due to the limitation of a number of sessions to Skype Online. A maximum of three simultaneous remote connections to Skype Online is allowed. You should wait for 30 minutes, after that the sessions that are not used would be closed and the error won't be displayed. For more details, please see this Microsoft article.
Comments
0 comments
Please sign in to leave a comment.