How does DRA determine if an AD user is Skype for Business Enabled

NetIQ Directory and Resource Administrator (DRA) 9.1.x, and newer can manage the AD attributes associated with a Microsoft Skype for Business Server (SFB) object. In order for DRA to be aware that an AD user is SFB enabled, certain AD attributes must be set.

DRA will read the value of the msRTCSIP-UserEnabled attribute. If this attribute is set to true, DRA will consider the AD user to be skype enabled.

When DRA is used to delete a skype enabled object, the sever will attempt to remove the skype certificates. Also during the deletion of a SFB enabled user,  DRA require access the SFB access credentials. These credentials are configured using the DRA Delegation and Configuration console, and are stored securely within the ADLDS instance used by DRA.