Office for business. If your Office for business subscription plan includes the desktop version of the Office apps you won't see an option to install it unless someone in your organization assigned a license to you. Learn how to check this in What Office 365 business product or license do I have? Or if you're an Office 365 admin responsible for assigning licenses to people in your. Microsoft Online Services Sign-In Assistant for IT Professionals RTW - Different downloads with EXACTLY the same name?? Hello All After some hours installing / restarting / uninstalling / scratching my head /searching the internet, I realized that the downloads.

-->

To troubleshoot Skype for Business Online sign-in errors, start by eliminating the most common causes of sign-in difficulty. If necessary, you can then follow specific resolution steps based on the type of error. If the user still cannot sign in, collect additional information, and then seek additional help.

What do you want to do?

Check for common causes of Skype for Business Online sign-in errors

Most sign-in issues can be traced to a small number of causes, and many of these are easy to correct. The table below lists some common causes of sign-in errors and some steps you or the users can take to resolve them.

Possible CauseResolution
During sign-in, a dialog box appears that contains the following phrase: cannot verify that the server is trusted for your sign-in address. Connect anyway?
Verify that the domain name in the dialog box is a trusted server in your organization—for example, domainName.contoso.com. Ask the user to select the Always trust this server check box, and then click Connect.
Enterprise customers can prevent this message from appearing when a user signs in for the first time by modifying the Windows registry on each user's computer. For details, see Modify TrustModelData registry keys.
Mistyped sign-in address, user name, or password
Confirm that the user's sign-in name and password are correct.
Verify that the user's sign-in name is formatted as follows: bobk@contoso.com. This may be different from the format you use to sign in to your organization's network.
Ask the user to try signing in again.
Forgotten password
Reset the user's password and notify him or her of the new temporary password.
Not licensed to use Skype for Business Online
Confirm that the user is registered as a Skype for Business Online user. If not, register the user, and then ask him or her to sign in again.
Wrong version of Skype for Business Online installed
This issue is usually associated with an error message that contains the following phrase: the authentication service may be incompatible with this version of the program.
Ask the user to uninstall and reinstall Skype for Business Online from the Office 365 Portal.
Problem acquiring a personal certificate that is required to sign in
If the user's sign-in address has recently changed, they may need to delete cached sign-in data. Ask users to sign out, click the Delete my sign-in info link on the sign-in screen, and then try again.
You set up a custom domain name, and the changes may not have finished propagating through the system.
First, ensure that you have modified the Domain Name Service (DNS) records to reflect the change.
If you have already made the necessary DNS changes, advise the user to try logging in later. DNS changes can take up to 72 hours to be reflected throughout the system.
System clock out of sync with server clock
Ensure that your network domain controller is synchronizing with a reliable external time source. For details, see the Microsoft Knowledge Base article 816042, How to configure an authoritative time server in Windows Server.

To troubleshoot Skype for Business Online sign-in errors, start by eliminating the most common causes of sign-in difficulty. If necessary, you can then follow specific resolution steps based on the type of error. If the user still cannot sign in, collect additional information, and then seek additional help.

Follow resolution steps for a specific error (Enterprise only)

Important

These instructions are intended primarily for Microsoft Office 365 Plan E customers. If you are an Office 365 Plan P customer, continue to the following section, Collect more information and seek additional help.

If the user cannot sign in after you have tried the suggestions in the previous section, then you can do additional troubleshooting based on the type of error. The table below lists the most common error messages and possible causes. Following the table are detailed procedures to address each issue.

Error messagePossible causeResolution
Sign-in address not found
Sign-in requests from the Microsoft Online Services Sign-On Assistant (msoidsvc.exe) are not going through your external firewall, or proxy server.
Add a firewall entry for msoidsvc.exe to your proxy server
Server is temporarily unavailable
If your organization has a custom domain, the necessary Domain Name System (DNS) settings may be missing or incorrect.
Update DNS settings
Server is temporarily unavailable
If your organization is using single sign-on with Active Directory Federation Services (ADFS), you may have used a self-signed Secure Socket Layer (SSL) certificate rather than one from a third-party certification authority.
Install a third-party SSL certificate on your ADFS server
Problem acquiring a personal certificate that is required to sign in
If you've already removed the cached server data used to sign in and the error continues to appear, the user's security credentials may be corrupted, or an RSA folder on the user's computer may be blocking authentication.
Update security credentials
A certificate trust dialog box appears when a user signs in for the first time.
This dialog box appears if your Skype for Business server is not yet listed in the TrustModelData registry key.
Modify TrustModelData registry keys
User is not SIP enabled
If your organization had a previous installation of Microsoft Office Communications Server or Microsoft Lync Server 2010, you may not have deleted your users from the server before decommissioning it. As a result, the msRTCSIP-UserEnabled attribute is still set to FALSE in Active Directory Domain Services.
Update user settings in Active Directory

Add a firewall entry for msoidsvc.exe to your proxy server

This procedure is a possible fix for the following error message: Sign-in address not found.

Note

The following steps assume you are using Microsoft Forefront Threat Management Gateway (TMG) 2010. If you have a different web gateway solution, use the settings described in step 4 below.

To create an application entry for Msoidsvc.exe in Forefront TMG 2010, follow these steps:

  1. In the Forefront left pane, click Networking.

  2. Click the Network tab. Under the Tasks tab in the right pane, click Configure Forefront TMG Client Settings.

  3. In the Forefront TMG Client Settings dialog box, click New.

  4. In the Application Entry Setting dialog box, configure the following rules:

ApplicationKeyValue
msoidsvc
Disable
0
msoidsvc
DisableEx
0

For details, see the Microsoft Knowledge Base article 2409256, You cannot connect to Skype for Business Online because an on-premises firewall blocks the connection.

Update DNS settings

If your organization has a custom domain, this procedure is a possible fix for the following error message: Server is temporarily unavailable.

  • Contact your domain name registrar for information on how to add the following CNAME record to your domain:

    • DNS record type: CNAME

    • Name: sip

    • Value/Destination: sipdir.online.lync.com

For details, see the Microsoft Knowledge Base article 2566790, Troubleshooting Skype for Business Online DNS configuration issues in Office 365.

Install a third-party SSL certificate on your ADFS server

To install a third-party SSL certificate on your Active Domain Federation Services (ADFS) server, follow these steps:

  1. Obtain an SSL certificate from a third-party certification authority such as VeriSign or Thawte.

  2. Install the certificate on your ADFS server by using the ADFS management console.

Update security credentials

This procedure is a possible fix for the error message Problem acquiring a personal certificate required to sign in.

To eliminate possible certificate or credential problems, first renew the user's certificate in Windows Certificate Manager. To do this, follow these steps:

  1. Open Windows Certificate Manager. To do this, click Start, click Run, type certmgr.msc, and then click OK.

  2. Double-click Personal, and then double-click Certificates.

  3. Sort by the Issued By column, and then look for a certificate that is issued by Communications Server.

  4. Right-click the certificate, and then click Delete.

Microsoft sign up

Next, if the user is running Windows 7, remove their stored credentials in Windows Credential Manager. To do this, follow these steps:

  1. Click Start, click Control Panel, and then click Credential Manager.

  2. Locate the set of credentials that is used to connect to Skype for Business Online.

  3. Expand the set of credentials, and then click Remove from Vault.

  4. Sign in again and reenter the user's credentials.

Finally, if the user still cannot sign in after you've updated their credentials, try deleting the RSA folder on the user's computer, because it could be blocking completion of the user authentication process:

  1. Sign in to the user's computer using an administrator account.

  2. If necessary, turn on the folder view option Show hidden files.

  3. Type the following into the address bar of File Explorer: C:Documents and SettingsUserNameApplication DataMicrosoftCryptoRSA, where UserName is your Windows sign-in name.

  4. Delete any folder that begins with the name S-1-5-21- followed by a string of numbers.

Modify TrustModelData registry keys

When a user signs in for the first time, they may receive a dialog box that contains something like the following: Cannot verify that the server is trusted for your sign-in address. Connect anyway? This is a security feature, and not an error. However, you can prevent the dialog box from appearing by using a Group Policy Object (GPO) to update users' machines with your domain name before they sign in for the first time. To accomplish this, do the following:

  • Create and deploy a GPO that appends your Skype for Business domain name—for example, domainName.contoso.com—to the current value of HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftCommunicatorTrustModelData.

Important

You must append your domain name to the existing value, not simply replace it.

For details, see the Microsoft Knowledge Base article 2531068, Skype for Business (Lync) cannot verify that the server is trusted for your sign-in address.

Update user settings in Active Directory

If your organization had a previous installation of Microsoft Office Communications Server or Microsoft Lync Server 2010, you may not have deleted your users from the server before decommissioning it. As a result, the msRTCSIP-UserEnabled attribute is still set to FALSE in Active Directory Domain Services.

To fix this issue, follow these steps:

  1. Update the msRTCSIP-UserEnabled attribute for all affected users to TRUE.

  2. Rerun the Microsoft Online Services Directory Synchronization Tool (DirSync). For details, see AIntegrate your on-premises directories with Azure Active Directory.

To troubleshoot Skype for Business Online sign-in errors, start by eliminating the most common causes of sign-in difficulty. If necessary, you can then follow specific resolution steps based on the type of error. If the user still cannot sign in, collect additional information, and then seek additional help.

Use the Microsoft Support troubleshooting guide

If you're still not able to resolve the user's sign-in problems, review the suggestions in Microsoft Knowledge Base article 2541980, How to troubleshoot sign-in issues in Skype for Business Online.

Collect more information and seek additional help

If you've followed the guidance above and still can't resolve your sign-in issues, you must collect additional information and contact technical support. To do this, follow these steps:

  1. Obtain the log files and Windows Event log details from the user's machine. For step-by-step instructions, see the end-user help topic Turn on error logs in Lync.

  2. Send the log files and detailed information about the error to Microsoft technical support.

You may be asked to supply additional diagnostic information by installing the Microsoft Online Services Diagnostic and Logging (MOSDAL) Support Toolkit on the affected user's machine. For details, see Using the MOSDAL Support Toolkit.

To troubleshoot Skype for Business Online sign-in errors, start by eliminating the most common causes of sign-in difficulty. If necessary, you can then follow specific resolution steps based on the type of error. If the user still cannot sign in, collect additional information, and then seek additional help.

Related topics

-->

Office 365 PowerShell lets you manage your Office 365 settings from the command line. Connecting to Office 365 PowerShell is a simple process where you install the required software and then connect to your Office 365 organization.

There are two versions of the PowerShell module that you use to connect to Office 365 and administer user accounts, groups, and licenses:

  • Azure Active Directory PowerShell for Graph (cmdlets include AzureAD in their name)
  • Microsoft Azure Active Directory Module for Windows PowerShell (cmdlets include MSol in their name)

As of the date of this article, the Azure Active Directory PowerShell for Graph module does not completely replace the functionality in the cmdlets of Microsoft Azure Active Directory Module for Windows PowerShell module for user, group, and license administration. In many cases, you need to use both versions. You can safely install both versions on the same computer.

What do you need to know before you begin?

You can use the following versions of Windows:

  • Windows 10, Windows 8.1, Windows 8, or Windows 7 Service Pack 1 (SP1)

  • Windows Server 2019, Windows Server 2016, Windows Server 2012 R2, Windows Server 2012, or Windows Server 2008 R2 SP1

    Note

    For the Azure Active Directory PowerShell for Graph module, you must use PowerShell version 5.1 or later. For the Microsoft Azure Active Directory Module for Windows PowerShell module, you must use PowerShell version 5.1 or later up to PowerShell version 6. You cannot use PowerShell version 7. For Windows 8.1, Windows 8, Windows 7 Service Pack 1 (SP1), Windows Server 2012 R2, Windows Server 2012, and Windows Server 2008 R2 SP1, download and install the Windows Management Framework 5.1.

    Note

    Use a 64-bit version of Windows. Support for the 32-bit version the Microsoft Azure Active Directory Module for Windows PowerShell was discontinued in October of 2014.

These procedures are intended for users who are members of an Office 365 admin role. For more information, see About Office 365 admin roles.

Microsoft Online Sign In Assistant For Mac Download

Connect with the Azure Active Directory PowerShell for Graph module

Commands in the Azure Active Directory PowerShell for Graph module have AzureAD in their cmdlet name. You can install the Azure Active Directory PowerShell for Graph module or Azure PowerShell.

For procedures that require the new cmdlets in the Azure Active Directory PowerShell for Graph module, use these steps to install the module and connect to your Office 365 subscription.

Note

See Azure Active Directory PowerShell for Graph module for information about the support for different versions of Microsoft Windows.

Step 1: Install required software

Microsoft Online Services Sign-in Assistant Download

These steps are required once on your computer, not every time you connect. However, you'll likely need to install newer versions of the software periodically.

  1. Open an elevated Windows PowerShell command prompt (run Windows PowerShell as an administrator).

  2. In the Administrator: Windows PowerShell command window, run this command:

If prompted about installing a module from an untrusted repository, type Y and press ENTER.

Step 2: Connect to Azure AD for your Office 365 subscription

To connect to Azure AD for your Office 365 subscription with an account name and password or with multi-factor authentication (MFA), run one of these commands from a Windows PowerShell command prompt (it does not have to be elevated).

Office 365 cloudCommand
Office 365 Worldwide (+GCC)Connect-AzureAD
Office 365 operated by 21 VianetConnect-AzureAD -AzureEnvironmentName AzureChinaCloud
Office 365 GermanyConnect-AzureAD -AzureEnvironmentName AzureGermanyCloud
Office 365 U.S. Government DoD and Office 365 U.S. Government GCC HighConnect-AzureAD -AzureEnvironmentName AzureUSGovernment

In the Sign into your account dialog box, type your Office 365 work or school account user name and password, and then click OK.

If you are using MFA, follow the instructions in the additional dialog boxes to provide more authentication information, such as a verification code.

After connecting, you can use the cmdlets for the Azure Active Directory PowerShell for Graph module.

Connect with the Microsoft Azure Active Directory Module for Windows PowerShell

Commands in the Microsoft Azure Active Directory Module for Windows PowerShell have Msol in their cmdlet name.

PowerShell version 7 and later do not support the Microsoft Azure Active Directory Module for Windows PowerShell module and cmdlets with Msol in their name. For PowerShell version 7 and later, you must use the Azure Active Directory PowerShell for Graph module or Azure PowerShell.

PowerShell Core does not support the Microsoft Azure Active Directory Module for Windows PowerShell module and cmdlets with Msol in their name. To continue using these cmdlets, you must run them from Windows PowerShell.

Step 1: Install required software

These steps are required once on your computer, not every time you connect. However, you'll likely need to install newer versions of the software periodically.

  1. Install the 64-bit version of the Microsoft Online Services Sign-in Assistant: Microsoft Online Services Sign-in Assistant for IT Professionals RTW.

  2. Install the Microsoft Azure Active Directory Module for Windows PowerShell with these steps:

  • Open an elevated Windows PowerShell command prompt (run Windows PowerShell as an administrator).
  • Run the Install-Module MSOnline command.
  • If prompted to install the NuGet provider, type Y and press ENTER.
  • If prompted to install the module from PSGallery, type Y and press ENTER.

Microsoft Online Sign In Assistant For Mac Free

Step 2: Connect to Azure AD for your Office 365 subscription

To connect to Azure AD for your Office 365 subscription with an account name and password or with multi-factor authentication (MFA), run one of these commands from a Windows PowerShell command prompt (it does not have to be elevated).

Microsoft Online Services Sign-in Assistant For It Professionals Rtw Mac

Office 365 cloudCommand
Office 365 Worldwide (+GCC)Connect-MsolService
Office 365 operated by 21 VianetConnect-MsolService -AzureEnvironment AzureChinaCloud
Office 365 GermanyConnect-MsolService -AzureEnvironment AzureGermanyCloud
Office 365 U.S. Government DoD and Office 365 U.S. Government GCC HighConnect-MsolService -AzureEnvironment USGovernment

In the Sign into your account dialog box, type your Office 365 work or school account user name and password, and then click OK.

If you are using MFA, follow the instructions in the additional dialog boxes to provide more authentication information, such as a verification code.

How do you know this worked?

If you don't receive any errors, you connected successfully. A quick test is to run an Office 365 cmdlet—for example, Get-MsolUser —and see the results.

If you receive errors, check the following requirements:

  • A common problem is an incorrect password. Run Step 2 again. and pay close attention to the user name and password you enter.

  • The Microsoft Azure Active Directory Module for Windows PowerShell requires that the Microsoft .NET Framework 3.5.x feature is enabled on your computer. It's likely that your computer has a newer version installed (for example, 4 or 4.5.x), but backwards compatibility with older versions of the .NET Framework can be enabled or disabled. For more information, see the following topics:

    • For Windows Server 2012 or Windows Server 2012 R2, see Enable .NET Framework 3.5 by using the Add Roles and Features Wizard

    • For Windows 7 or Windows Server 2008 R2, see You can't open the Azure Active Directory Module for Windows PowerShell

    • For Windows 10, Windows 8.1, and Windows 8, see Install the .NET Framework 3.5 on Windows 10, Windows 8.1, and Windows 8

  • Your version of the Microsoft Azure Active Directory Module for Windows PowerShell might be out of date. To check, run the following command in Office 365 PowerShell or the Microsoft Azure Active Directory Module for Windows PowerShell:

    If the version number returned is lower than the value 1.0.8070.2, uninstall the Microsoft Azure Active Directory Module for Windows PowerShell and install the latest version from the link in Step 1.

  • If you receive a connection error, see this topic:'Connect-MsolService: Exception of type was thrown' error.

  • If you receive a 'Get-Item : Cannot find path' error, use this command:

See also