Crear una cuenta del dispositivo mediante la interfaz de usuario (Surface Hub)

Si prefieres usar una interfaz gráfica de usuario, puedes crear una cuenta del dispositivo para tu Microsoft Surface Hub con la Interfaz de usuario de Office 365 o el Centro de administración de Exchange.

Crear una cuenta del dispositivo mediante Office 365

  1. Crear la cuenta en el Centro de administración de Office 365.
  2. Crear una directiva de buzón (ActiveSync) de dispositivos móviles desde el Centro de administración de Microsoft Exchange.
  3. Usar PowerShell para completar la creación de cuentas de dispositivo.
  4. Usar PowerShell para configurar las propiedades de Exchange de la cuenta.
  5. Habilitar la cuenta con Skype Empresarial.

Crear la cuenta en el Centro de administración de Office 365

  1. Inicia sesión en Office 365 visitandohttp://portal.office.com
  2. Proporciona las credenciales de administrador para tu inquilino de Office 365. Esto te llevará al Centro de administración de Office 365.

    Centro de administración de Office 365.

  3. Una vez que te encuentres en el Centro de administración de Office 365, ve a Recursos en el panel izquierdo y después haz clic en Salas y equipos.

    La opción Salas y equipos en el Centro de administración de Office 365

  4. Haga clic en Agregar para crear una nueva cuenta de la sala. Introduce un nombre para mostrar y la dirección de correo electrónico y, a continuación, haz clic en Agregar.

    Crear nueva ventana de cuenta de la sala

  5. Selecciona la cuenta de la sala que acabas de crear en la lista de usuarios activos. En el panel derecho, puedes ver las propiedades de la cuenta y varias acciones opcionales. Haz clic en Restablecer contraseña para cambiar la contraseña y anular la selección de Make this user change their password when they first sign in, porque no es posible cambiar la contraseña desde el flujo de inicio de sesión de Surface Hub.

  6. Haz clic en Editar en la sección Licencia asignada y, luego, haz clic en la flecha desplegable situada junto a la licencia correspondiente para ampliar los detalles. Selecciona una ubicación del usuario y en la lista de licencias, activa Skype Empresarial Online (Plan 2) y, a continuación, haz clic en Guardar. La licencia puede variar en función de tu organización (por ejemplo, puedes tener Plan 2 o Plan 3).

Crear una directiva de buzón (ActiveSync) de dispositivo móvil desde el Centro de administración de Exchange

  1. En panel izquierdo del Centro de administración de Office 365, haz clic en ADMINISTRADORy, a continuación, haz clic en Exchange.

    Centro de administración de Office 365, que muestra los usuarios activos de Exchange.

  2. Se abrirá otra ficha en el explorador que te llevará al Centro de administración de Exchange, donde puedes crear y establecer la configuración del buzón de Surface Hub.

    Centro de administración de Exchange.

  3. Para crear una directiva de buzón de dispositivo móvil, haz clic en Móvil desde el panel izquierdo y luego haz clic en Directivas de buzón de dispositivo móvil. Los Surface Hubs requieren una cuenta con una directiva de buzón de dispositivo móvil que no requiera una contraseña, por lo que si ya tienes una directiva que cumpla este requisito, puedes aplicar esa directiva a la cuenta. De lo contrario, sigue los siguientes pasos para crear una nueva solo para usarse en cuentas de dispositivo de Surface Hub.

    Centro de administración de Exchange: creación de una directiva de buzón de dispositivo móvil.

  4. Para crear una nueva directiva de buzón de dispositivo móvil de Surface Hub, haz clic en el botón + en los controles situados encima de la lista de directivas para agregar una nueva directiva. En cuanto al nombre, proporciona un nombre que te ayude a distinguir esta directiva de otras cuentas de dispositivo (por ejemplo, SurfaceHubDeviceMobilePolicy). Asegúrate de que la directiva no requiera una contraseña para los dispositivos a los que se ha asignado, de modo que asegúrate de que Requerir una contraseña permanezca sin marcar y, luego, haz clic en Guardar.

    Imagen que muestra la nueva directiva de dispositivo móvil.

  5. Después de crear la nueva directiva de buzón de dispositivo móvil, vuelve al Centro de administración de Exchange y verás la nueva directiva en la lista.

    Imagen con la nueva directiva de buzón de dispositivo móvil en el Centro de administración de Exchange.

Usar PowerShell para completar la creación de cuentas de dispositivo

De ahora en adelante, debes finalizar el proceso de creación de cuenta mediante PowerShell para establecer una configuración.

Para poder ejecutar los cmdlets usados por estos scripts de PowerShell, se debe instalar lo siguiente en la consola de administración de PowerShell:

Instalar el siguiente módulo de Powershell

    install-module AzureAD
    Install-module MsOnline
    ```

### Connecting to online services

1.  Run Windows PowerShell as Administrator.

    ![Image showing how to start Windows PowerShell and run as administrator.](images/setupdeviceaccto365-17.png)

2.  Create a Credentials object, then create a new session that connects to Skype for Business Online, and provide the global tenant administrator account, then click **OK**.

    ![Image for Windows PowerShell credential request. ](images/setupdeviceaccto365-18.png)

3.  To connect to Microsoft Online Services, run:

    ``` syntax
    Connect-MsolService -Credential $Cred
    ```

    ![Image showing PowerShell cmdlet.](images/setupdeviceaccto365-19.png)

4.  Now to connect to Skype for Business Online Services, run:

    ``` syntax
    $sfbsession = New-CsOnlineSession -Credential $cred
    ```

    ![Image showing PowerShell cmdlet.](images/setupdeviceaccto365-20.png)

5.  Finally, to connect to Exchange Online Services, run:

    ``` syntax
    $exchangeSession = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri "https://outlook.office365.com/powershell-liveid/" -Credential $cred -Authentication "Basic" –AllowRedirection
    ```

    ![Image showing PowerShell cmdlet.](images/setupdeviceaccto365-21.png)

6.  Now you have to import the Skype for Business Online Session and the Exchange Online session you have just created, which will import the Exchange and Skype Commands so you can use them locally.

    ``` syntax
    Import-PSSession $exchangesession -AllowClobber -WarningAction SilentlyContinue
    Import-PSSession $sfbsession -AllowClobber -WarningAction SilentlyContinue
    ```

    Note that this could take a while to complete.

    ![Image showing PowerShell cmdlet.](images/setupdeviceaccto365-22.png)

7.  Once you’re connected to the online services you need to run a few more cmdlets to configure this account as a Surface Hub device account.

### <a href="" id="create-device-acct-o365-configure-exch-prop"></a>Use PowerShell to configure Exchange properties of the account

Now that you're connected to the online services, you can finish setting up the device account. You'll use the device account email address to:

-   Change the mailbox type from regular to room.
-   Set the password and enable the room mailbox account
-   Change various Exchange properties
-   Set the user account password to never expire.

1.  You’ll need to enter the account’s mail address and create a variable with that value:

    ```powershell
    $mailbox = (Get-Mailbox <your device account’s alias>)
    ```

    To store the value get it from the mailbox:

    ```powershell
    $strEmail = $mailbox.WindowsEmailAddress
    ```

    Print the value:

    ```powershell
    $strEmail
    ```

    You will see the correct email address.

    ![Image showing PowerShell cmdlet.](images/setupdeviceaccto365-23.png)

2. Run the following cmdlet:

    ```powershell
    Set-CASMailbox $strEmail  -ActiveSyncMailboxPolicy "SurfaceHubDeviceMobilePolicy"
    ```

4.  Various Exchange properties can be set on the device account to improve the meeting experience. You can see which properties need to be set in the [Exchange properties](exchange-properties-for-surface-hub-device-accounts.md) section.

    ``` syntax
    Set-CalendarProcessing -Identity $strEmail -AutomateProcessing AutoAccept -AddOrganizerToSubject $false –AllowConflicts   $false –DeleteComments $false -DeleteSubject $false -RemovePrivateProperty $false
    Set-CalendarProcessing -Identity $strEmail -AddAdditionalResponse $true -AdditionalResponse "This is a Surface Hub room!"
    ```

    ![Image showing PowerShell cmdlet.](images/setupdeviceaccto365-26.png)

5.  If you decide to have the password not expire, you can set that with PowerShell cmdlets too. See [Password management](password-management-for-surface-hub-device-accounts.md) for more information.

    ``` syntax
    Set-MsolUser -UserPrincipalName $strEmail -PasswordNeverExpires $True
    ```

### <a href="" id="create-device-acct-o365-skype-for-business"></a>Enable the account with Skype for Business

Enable the device account with Skype for Business.

In order to enable Skype for Business, your environment will need to meet the following prerequisites:

-   You'll need to have Lync Online (Plan 2) or higher in your O365 plan. The plan needs to support conferencing capability.
-   If you need Enterprise Voice (PSTN telephony) using telephony service providers for the Surface Hub, you need Lync Online (Plan 3).
-   Your tenant users must have Exchange mailboxes.
-   Your Surface Hub account does require a Lync Online (Plan 2) or Lync Online (Plan 3) license, but it does not require an Exchange Online license.

1.  Start by creating a remote PowerShell session from a PC.

    ```PowerShell
    Import-Module LyncOnlineConnector
    $cssess=New-CsOnlineSession -Credential $cred
    Import-PSSession $cssess -AllowClobber
    ```

2.  To enable your Surface Hub account for Skype for Business Server, run this cmdlet:

    ```PowerShell
    Enable-CsMeetingRoom -Identity $strEmail -RegistrarPool "sippoolbl20a04.infra.lync.com" -SipAddressType EmailAddress
    ```

    If you aren't sure what value to use for the `RegistrarPool` parameter in your environment, you can get the value from an existing Skype for Business user using this cmdlet:

    ```PowerShell
    Get-CsOnlineUser -Identity ‘alice@contoso.microsoft.com’| fl *registrarpool*
    ```

## <a href="" id="create-device-acct-eac"></a>Create a device account using the Exchange Admin Center


You can use the Exchange Admin Center to create a device account:

1.  [Create an account and mailbox with the Exchange Admin Center](#create-device-acct-exch-admin-ctr).
2.  [Create a mobile device mailbox policy from the Exchange Admin Center](#create-device-acct-exch-mbx-policy).
3.  [Use PowerShell to configure the account](#create-device-acct-exch-powershell-conf).
4.  [Enable the account with Skype for Business](#create-device-acct-exch-skype-for-business).

### <a href="" id="create-device-acct-exch-admin-ctr"></a>Create an account and mailbox with the Exchange Admin Center

1.  Sign in to your Exchange Admin Center using Exchange admin credentials.
2.  Once you are at the Exchange Admin Center (EAC), navigate to **Recipients** in the left panel.

    ![Image showing mailboxes in Exchange admin center.](images/setupdeviceacctexch-01.png)

3.  On the controls above the list of mailboxess, choose **+** to create a new one, and provide a **Display name**, **Name**, and **User logon name**, and then click **Save**.

    ![Image showing creating a new mailbox.](images/setupdeviceacctexch-02.png)

### <a href="" id="create-device-acct-exch-mbx-policy"></a>Create a mobile device mailbox policy from the Exchange Admin Center

>[!NOTE]
>If you want to create and assign a policy to the account you created, and are using Exchange 2010, look up the corresponding information regarding policy creation and policy assignment when using the EMC (Exchange management console).



1.  Go to the Exchange Admin Center.

    ![Image showing Exchange admin center.](images/setupdeviceacctexch-03.png)

2.  To create a mobile device mailbox policy, click **Mobile** from the left panel, then **Mobile device mailbox policies**. Surface Hubs require an account with a mobile device mailbox policy that does not require a password, so if you already have an existing policy that matches this requirement, you can apply that policy to the account. Otherwise use the following steps to create a new one to be used only for Surface Hub device accounts.

    ![Image showing using Exchange admin center to create a mobile device mailbox policy.](images/setupdeviceacctexch-05.png)

3.  To create a new mobile device account mailbox policy, click the **+** button from the controls above the list of policies to add a new policy. For the name provide a name that will help you distinguish this policy from other device accounts (for example, *SurfaceHubDeviceMobilePolicy*). The policy must not be password-protected, so make sure **Require a Password** remains unchecked, then click **Save**.

    ![Image showing new mobile device mailbox policy.](images/setupdeviceacctexch-06.png)

4.  After you have created the new mobile device mailbox policy, go back to the Exchange Admin Center and you will see the new policy listed.

    ![Image showing new mobile device mailbox policy in Exchange admin center.](images/setupdeviceacctexch-07.png)

5.  To apply the ActiveSync policy without using PowerShell, you can do the following:

    -   In the EAC, click **Recipients** &gt; **Mailboxes** and select a mailbox.

        ![image showing exchange admin center.](images/setupdeviceacctexch-08.png)

    -   In the **Details** pane, scroll to **Phone and Voice Features** and click **View details** to display the **Mobile Device Details** screen.

        ![image showing mailbox details.](images/setupdeviceacctexch-09.png)

    -   The mobile device mailbox policy that’s currently assigned is displayed. To change the mobile device mailbox policy, click **Browse**.

        ![image showing the currently assigned mobile device mailbox policy.](images/setupdeviceacctexch-10.png)

    -   Choose the appropriate mobile device mailbox policy from the list, click **OK** and then click **Save**.

        ![image showing list of mobile device mailbox policies.](images/setupdeviceacctexch-11.png)

### <a href="" id="create-device-acct-exch-powershell-conf"></a>Use PowerShell to configure the account

Now that you're connected to the online services, you can finish setting up the device account. You'll use the device account email address to:

-   Change the mailbox type from regular to room.
-   Change various Exchange properties
-   Set the user account password to never expire.

1.  You’ll need to enter the account’s mail address and create a variable with that value:

    ``` syntax
    $mailbox = (Get-Mailbox <your device account’s alias>)
    ```

    To store the value got it from the mailbox:

    ``` syntax
    $strEmail = $mailbox.WindowsEmailAddress
    ```

    Print the value by running:

    ``` syntax
    $strEmail
    ```

    You will see the correct email address.

2.  You need to convert the account into a room mailbox, so run:

    ``` syntax
    Set-Mailbox $strEmail -Type Room
    ```

3.  In order for the device account to be authenticated on a Surface Hub, you need to enable the room mailbox account and set a password, so the account can be used by the device to get meeting information using ActiveSync and log in to Skype for Business.

    ``` syntax
    Set-Mailbox $strEmail -RoomMailboxPassword (ConvertTo-SecureString  -String "<your password>" -AsPlainText -Force) -EnableRoomMailboxAccount $true
    ```

4.  Various Exchange properties can be set on the device account to improve the meeting experience. You can see which properties need to be set in the [Exchange properties](exchange-properties-for-surface-hub-device-accounts.md) section.

    ``` syntax
    Set-CalendarProcessing -Identity $strEmail -AutomateProcessing AutoAccept -AddOrganizerToSubject $false –AllowConflicts   $false –DeleteComments $false -DeleteSubject $false -RemovePrivateProperty $false
    Set-CalendarProcessing -Identity $strEmail -AddAdditionalResponse $true -AdditionalResponse "This is a Surface Hub room!"
    ```

5.  Now we have to set some properties in AD. To do that, you need the alias of the account (this is the part of the UPN that becomes before the “@”).

    ``` syntax
    $strAlias = “<your device account’s alias>”
    ```

6.  The user needs to be enabled in AD before it can authenticate with a Surface Hub. Run:

    ``` syntax
    Set-ADUser $strAlias -Enabled $True
    ```

7.  If you decide to have the password not expire, you can set that with PowerShell cmdlets too. See [Password management](password-management-for-surface-hub-device-accounts.md) for more information.

    ``` syntax
    Set-ADUser $strAlias -PasswordNeverExpires $True
    ```

### <a href="" id="create-device-acct-exch-skype-for-business"></a>Enable the account with Skype for Business

Enable the device account with Skype for Business.

In order to enable Skype for Business, your environment will need to meet the following prerequisites:

-   You'll need to have Lync Online (Plan 2) or higher in your O365 plan. The plan needs to support conferencing capability.
-   If you need Enterprise Voice (PSTN telephony) using telephony service providers for the Surface Hub, you need Lync Online (Plan 3).
-   Your tenant users must have Exchange mailboxes.
-   Your Surface Hub account does require a Lync Online (Plan 2) or Lync Online (Plan 3) license, but it does not require an Exchange Online license.

1.  Start by creating a remote PowerShell session from a PC.

    ```PowerShell
    Import-Module LyncOnlineConnector
    $cssess=New-CsOnlineSession -Credential $cred
    Import-PSSession $cssess -AllowClobber
    ```

2. Retrieve your Surface Hub account Registrar Pool

If you aren't sure what value to use for the `RegistrarPool` parameter in your environment, you can get the value from an existing Skype for Business user using this cmdlet:

    ```PowerShell
    Get-CsOnlineUser -Identity ‘alice@contoso.microsoft.com’| fl *registrarpool*
    ```

3.  To enable your Surface Hub account for Skype for Business Server, run this cmdlet:

    ```PowerShell
    Enable-CsMeetingRoom -Identity $strEmail -RegistrarPool
    "sippoolbl20a04.infra.lync.com" -SipAddressType EmailAddress
    ```