Quantcast
Channel: Lync Server 2013 - Management, Planning, and Deployment forum
Viewing all 5984 articles
Browse latest View live
↧

Delete old default certificate after changing external web services URL

February 28, 2015, 1:02 am
$
0
0

Hello I just followed this post to change my external web FQDN since it was the same as the name of the pool.

https://social.technet.microsoft.com/Forums/lync/en-US/07b80a58-a2b3-408a-9984-1a4c11d64afd/changing-external-web-fqdn-question-with-certs?forum=lyncdeploy

After renewing, installing, and assigning a new default certificate on the 1 and only front end enterprise pool server I went in to the personal store and deleted the old one.  Well after that the front end server freaked out (services would not start, many errors in the event log) and seemed to be looking for the old certificate.  I thought it would be safe to do this, but not?  Why did it still need the old certificate?  To fix it I reran setup or remove lync components, and ran the certificate wizard again and then the old certificate reappeared.  So now the server needs 2 certificates in the personal store?  What happens when that older one expires?  And after rerunning the certificate wizard it completed with warnings:

Warning: "" does not match a unique certificate on this host for issuer "name of CA".  Everything else completed with Success.  Although things are working fine now, will this come back to haunt me later?

Thanks for any help you can provide to clear up this mystery for me.

↧
Search

Cannot login to LRS Admin Portal

December 1, 2013, 4:43 am
$
0
0

Greetings. I've installed the LRS Admin Portal per http://technet.microsoft.com/en-us/library/dn436324.aspx on each of our Front Ends. I've added several accounts to the LRSFullAccessAdminGroup AD group. I've reset IIS, and logged out/back in to one of the FEs. I can get to the portal page using either https:\\localhost\lrs, https:\\servername\lrs, and https:\\FEpoolFQDN\lrs without issue. But none allow me to login. "We couldn't sign you in. Please check your sign-in info and try again." I've attempted to log in using username, domain\username, and UPN/SIP address. The IIS log file shows a 401 error.

At this point, I have no LRS installed. Just getting the portal ready.

Anyone seen this before?

↧
↧

Cannot run the Lync Stress Tool to simulate UC-to-UC calls in lab

February 25, 2015, 1:47 pm
$
0
0

Hello Folks:

I built a test lab for myself using one front-end and one edge lync server. there is also an AD in the network.

I am trying to simulate some UC to UC calls using the stress tools. I am not looking to simulate any PSTN; only UC to UC. My client machines are connected to the Lync network remotes via vpn client.

I created the users on lync server using the "userprovisioning tool". And created the following config:

I need some help for the rest. I am not trying to run this to test my edge server. Just trying to generate some traffic.

1) do I need to make any modification the final xml files (I see the mediation attribute for example. I dont think I need it)

2) Am I suppose to copy client0 and client1 on each client machine and start them independently?

3) How can I verify that the tests are successful?

Thanks,

Arda

↧

Error with Lync 2013 forest preperation .

March 1, 2015, 2:24 am
$
0
0

Dears ,I have in issue with Lync 2013 installation as the following

1- I faced a problem with missing Program Data, Microsoft  containers , solved by recreating them .

2- another error happened and I could not resolve it as the following

> Prepare Forest

Enable-CSAdForest  -Verbose -Confirm:$false -Report "C:\Users\Administrator.Domain\AppData\Local\Temp\2\Enable-CSAdForest-[2015_03_01][11_39_01].html"
Creating new log file "C:\Users\Administrator.domain\AppData\Local\Temp\2\Enable-CSAdForest-0fadc285-ca73-4a25-b5b7-2e42e0bdcdb9.xml".
Enable the Active Directory forest to host Lync Server 2013 deployments.
Prepare Forest Active Directory settings execution failed on an unrecoverable error.
Creating new log file "C:\Users\Administrator.Domain\AppData\Local\Temp\2\Enable-CSAdForest-[2015_03_01][11_39_01].html".
 WARNING: Enable-CSAdForest failed.
 WARNING: Detailed results can be found at "C:\Users\Administrator.Domain\AppData\Local\Temp\2\Enable-CSAdForest-[2015_03_01][11_39_01].html".
Command execution failed: Length of the access control list exceed the allowed maximum.

and manually

PS C:\Users\Administrator.DOMAIN> Enable-CsAdForest -GroupDomain domain.local
Enable-CsAdForest : Prepare Forest Active Directory settings execution failed
on an unrecoverable error.
At line:1 char:1+ Enable-CsAdForest -GroupDomain domain.local+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~+ CategoryInfo          : InvalidOperation: (:SourceCollection) [Enable-Cs
   AdForest], OverflowException+ FullyQualifiedErrorId : TaskFailed,Microsoft.Rtc.Management.Deployment.P
   repareForestCmdlet
WARNING: Enable-CsAdForest failed.
WARNING: Detailed results can be found at"C:\Users\Administrator.DOMAIN\AppData\Local\Temp\2\Enable-CsAdForest-38952996-b
c34-4860-8800-c12787ab9723.html".
Enable-CsAdForest : Command execution failed: Length of the access control
list exceed the allowed maximum.
At line:1 char:1+ Enable-CsAdForest -GroupDomain domain.local+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~+ CategoryInfo          : InvalidOperation: (:) [Enable-CsAdForest], Overf
   lowException+ FullyQualifiedErrorId : ProcessingFailed,Microsoft.Rtc.Management.Deploy
   ment.PrepareForestCmdlet

Any help ?


↧

Oddities for Mobile users connected via Lync Edge

February 21, 2015, 8:34 pm
$
0
0
Hi All,

I have just deployed Lync 2013 Standard (with Updates), Lync Edge, and the RP is IIS ARR 3, all running on Windows 2012r2, and all seems pretty OK. Internal users seem to be good, federation seems fine, and even mobile user and make and receive calls, but there seem to be just one or two oddities.

1. Fisrtly, the Microsoft Remote Connectivity Analyser fails on the Remote Connectivity Test. The failure is obscure, the test get to the 4th test and fails:
----------------------------------------------------------------------------------------------------
Testing remote connectivity for user me@mydom.com to the Microsoft Lync server.

Specified remote connectivity test(s) to Microsoft Lync server failed. See details below for specific failure reasons.
Tell me more about this issue and how to resolve it

Additional Details

Couldn't sign in. Error: Error Message: The operation failed after several attempts..
Error Type: RegisterException.
Deregister Reason: None.
.
Elapsed Time: 3863 ms
-------------------------------------------------------------------------------------------------
I have run the Lync Connectivity Analyser standalone application and all comes up green for the Lync 2013 application

2. When a mobile user is logged in on their Phone (Android) and the phone goes to sleep, the Lync client no longer rings. You can turn on the notification icon and this still suggests the the client is signed in, however, when you click on the app, you actually see the application splash page and then the app sings in. You can then see the Status go from Grey offline for Green On-line.

3. Sometime after I managed to get the phone client to wake up properly, I can create a call and the client will ring. If the users also is connected via their laptop which is connected via the Lync Edge, both device will ring, which is as it should be. However, SOMETIMES (not all the time) when the user answers on the mobile, the desktop client continues to ring. Of course trying to then answer on the desktop tries to connect, but can't.

Has anyone got any ideas what might be wrong and where I might need to start looking?

Chris
↧
↧

Installing Lync 2013 in child domain

February 25, 2015, 2:44 pm
$
0
0

So i have seen similar questions asked and answered to some extent, however they dont help me fix my issue and hoping i can get a little extra help.

My situation is as follows,

I am the domain admin of a child domain, the root forest i have no control over and no access to. It seems like Lync is deployed in another child domain by the corresponding admin, as all the corresponding user groups exist in the forest, i noticed this before i ran the preparation wiz. 

I need to get Lync installed and working for the members of our child domain, lets go with child1.contoso.com as my domain, child2.contoso.com as the other child domain where lync already exists and contoso.com as the forest root.

When i ran the prep wiz, i had all ticks and it seemed that i was ready to go, forest prep passed as it was already prepped, otherwise i think it would have failed as i said i dont have access to it.

I check my domain for csadministrator group, not there. Along with all the other groups, they are not there. They exist in the forest, just not in my child domain. I push on...

I run my topology builder, enter in the details it needs, i have a server set up for lync FS01.child1.contoso.com, all goes through fine till the end when i try and publish it. I get the following error

SQL Server store servername.child2.contoso.com\sharename is not defined in the topology...

This is looking at the other child domain for some reason.

So out of this i have a couple of questions;

1. How can i deploy lync to my child domain that i have access to? deploy all the necessary groups and accounts

2. how do i fix the above error and why is it looking at the other server?

↧

Lync 2010 and 2013 coexistence - DNS

February 3, 2015, 11:35 am
$
0
0

Hi all,

we are planning to upgrade from Lync server 2010 to 2013.During this mode,what is best to do regarding DNS?

Should we just keep existing ones and let Lync server proxy users, or do we need to point dns (internal and external) to the new 2013 server?

Like in Exchange 2010 and 2013 coexistence we had to point all dns to 2013 server,or users wont be proxied.

These are the DNS:

lyncdiscoverinternal

meet,dialin,admin

_sipinternaltls._tcp.domain.com

_sipfederationtls._tcp

sip.domain.com

Other DNS i might forgot?

thanks!

Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you. Thank you! Off2work

↧

Test Drive Lync 2013 - Certificates Issues

February 23, 2015, 2:13 am
$
0
0

Hello,

My name is Arnaud, I evaluate Lync 2013 with a pre-configured set of VHD's of "Test Drive Lync 2013" :

Several certificates in this Platform are expired since 2014 december and we are no longer able to use this "Test Drive".

Is there someone to help me to renew the certificates and post an article in a blog about that problem ?

Thank you

↧
Search

DNS Record for Lync Mobility on Wireless

February 25, 2015, 5:16 am
$
0
0

Hi,

Myunderstanding that when lync sign happens, it follows the DNS record in the below fashion

lyncdiscoverinternal.domain.com
lyncdiscover.domain.com
_sipinternaltls._tcp.domain.com
sipintenal.domain.com

sip.domain.com
sipexternal.domain.com

Now as it starts with lyncdiscoverinternal.domain.com and gets the internal web services URLs that it'll try to authenticate to get a web ticket but it'll eventually fail because the mobile devices wouldn't have the certificate root chain of the private certificate assigned to front end server....

..So in this situation, shouldn't it failover to lyncdiscover.domain.com and other DNS records before it fails altogether ?

Regards, Pushkal MishrA, This posting is provided “AS IS” with no warranties and confers no rights. I request you to test the solution in lab and post successful outcome you should try this on production.

↧
↧

How to calculate WAN bandwidth?

February 26, 2015, 4:18 am
$
0
0

Hi Team,

We have a customer who has the following:

2 sites
5000 users distributed on the 2 sites

How do we calculate the bandwidth of the link between the 2 sites is what we need to calculate?

Please advise.



↧

lync 2013 client show ews not depoly exchange 2013

January 30, 2015, 4:04 am
$
0
0

I ran the lync powershell as below:

Set-CsClientPolicy -Identity Global -DisableEmailComparisonCheck $true


1. lync sip domain is different with smtp address. -> lync client will show ews not deploy.

2. added sip domain to email smtp address and lync client sometimes will show ews is ok sometime will show ews not deply.

Any idea? if client only using IM feature and lync conference ,outlook  lync meeting features. ews is not big impact on the IM, conference , outlook meeting?


Exchange autodiscover A record was added, exchange was using wildcard certificate.



↧

Need to remove options in Lync Conference Outlook invitations via policy

March 2, 2015, 3:53 am
$
0
0

Hello - For our Lync conference invites via Outlook, we only want our users to see 'Join Lync Meeting,' 'Join by Phone,' and the conference ID.  We need to strip out Find a local number; Forgot your dial-in PIN and English (United States), as well as our company logo.  We need to do this for all associates in our North American offices.  However one of our offices overseas has their own conference invitations setup, so I would need only users in our USA pool to see these changes.

I looked online for clues on how to do this, and all I can find is at the outlook or 0365 level.  I need to to do this at the policy level, if possible.  Anyone have any links that would walk me through accomplishing this?

Thanks!




↧

Lync Response Group Manager - cannot change opening hours

September 3, 2014, 5:07 am
$
0
0

Hi all

I've run into an odd problem with Lync Response Groups with Lync 2013 Server. Just wondering if anyone has seen this before or knows of a solution. I've searched around but can't find any reference to this particular problem.

Response supervisors who are defined in the workflow and are a member of the AD group CSResponseGroupManager cannot change working hours for their response group from a custom schedule to a preset in the web interface.
If the workflow is already set to preset they can switch between existing presets, and they can switch from preset to custom. But once it has been set to custom they cannot change it back to preset.

They can select to do so but when they click Save they receive an error on the page saying "The term 'Remove-CsRgsHoursOfBusiness' is not recognized as the name of a cmdlet, function, script file, or operable program. Check the spelling of the name, or if a path was included, verify that the path is correct and try again."

I don't believe this is by design, why would you want a workflow manager to be able to switch between presets or to custom but not back again?

If they are a member of CSResponseGroupAdministrator this works, however this is not really a solution as members of this group can edit all workflows and we don't want the managers of a workflow for one department able to access the workflows of another.

Any information greatly appreciated.

↧
↧

Deploying Mobility over VPN with no External DNS.

March 3, 2015, 1:27 am
$
0
0

Hi All,

In our organisation we are running a standard edition Lync 2013 deployment, with just FE servers arc/mon co-located. We have a requirement to deploy mobility to IOS/Andriod etc. Although all mobile clients are connected into the internal network via VPN. We do not use External DNS so im not sure that publishing the external web services URL's out to an external IP for resolution and using media bypass/force split tunnel would be an option. Bearing in mind that the use of ExposedWebUrl is depreciated for 2013 clients and they are not able to point direct to the internal web service urls. Has anyone been able to get this working/have a direction to troubleshoot?

Thanks in advance.

↧

Cannot Start Cls Logging (Successful on 0 agents)

March 3, 2015, 2:35 am
$
0
0

I have a Lync 2013 deployment in which I am having to troubleshoot calling from Lync to Polycom, and I wanted to use the ClsLogging to do this.  Unfortunately, when I use "Start-CsClsLogging -Scenario AlwaysOn", it returns "Success Code - 0, Successful on 0 agents".

If I check the status with "Show-CsClsLogging", it also returns "Success Code - 0, Successful on 0 agents"

I have verified that all services which are prefixed with "Lync Server" are running, including the "Lync Server Centralized Logging Service Agent"

I have attempted this command on my Lync Front End Server.  I have followed the instructions from https://technet.microsoft.com/en-gb/library/jj687958.aspx, and I'm definitely not seeing the same kinds of results as they have shown in screenshots.

Googling hasn't found others with this specific issue.  Any advice?

↧
Search

Excel 2010 cannot open Access 97 files after Lync 2013 setup

March 3, 2015, 3:30 am
$
0
0

We are trying to deploy Lync 2013 in our company worldwide and after the pilot period we found out that even our official Office package is 2010 (Access 97 compatible), if we install Lync 2013 all software or references to Access 97 databases fail to open because the error says the current versión cannot open Access 97 databases (and I still work with Excel 2010).

Is there any solution or workaround to be able to work with Access 97 databases once Lync 2013 has been installed?.

Hope you can help me.

Regards.

↧

Skype for Business - Hybrid model - resource forest

March 3, 2015, 3:46 am
$
0
0

Microsoft just announced that in Hybrid model Resource Forests is not supported. This mean that forest trusts will not be supported so what’s are options ? 


↧
↧

Is it possible to have two Paired Lync Standard Edition servers in different domains?

March 3, 2015, 6:10 am
$
0
0
We initially installed Lync in a parent domain with all the users in the child domain. The user's SIP addresses is that of the child domain. We now have a requirement to migrate the server to the same child domain as the users. At the same time we need to set-up a new server to test some planned network changes. Would it be possible to set-up another Standard Edition Front End Server in the child domain and pair it with the server in the primary domain? We can then migrate the users across as required.
↧

PowerPoint presentations do not show text but only graphics after uploaded

July 22, 2013, 7:14 am
$
0
0

Hello,

I have a "small" problem with PowerPoint presentations in our Lync 2013 PoC deployment. We have deployed the FE and WAC server according to the deployment procedures, the FE is fully functional. For WAC, besides the procedure published in Technet we followed these recommendations:

http://technet.microsoft.com/en-us/library/jj219455.aspx

http://blog.insidelync.com/2012/08/lync-server-2013-preview-and-the-office-web-app-server-preview/

http://howdouc.blogspot.com/2012/08/installing-office-web-apps-server-for.html

We can upload pptx files in a conference but when apparently the content is fully uploaded,the text is ripped off the presentation, only graphics, brackgrounds are displayed. This consistently happens from the very simple presentations to the content-rich ones. Not sure where the problem is, whether in the Lync FE or in the Office Web Apps server. Our WAC server is configured with HTTPS, ran all the testings to check if is operational and apparently it is. the FE logs event 41032 that shows that the FE successfully discovered Office Web Apps server, 41034 is logged too.

This is very puzzling so any idea is very welcome.

Regards,

MC

↧

Changing the Internal Interface FQDN

March 2, 2015, 3:36 pm
$
0
0

We created an internal interface VIP name for the edge pool that is not compliant with public CA specifications from RFC 5280. Therefore a cert can not be generated using this name. How do I go about changing the FQDN of the internal Edge pool to a compliant one for the public CA?

The topology is published so I can not change the name of the edge pool FQDN so I figured I could delete the existing pool after dis-associating it with the front end pool, then create new one.  This generates an ominous error that the edge pool serves as a federation route but I answered yes anyway.

When I try to add a new server in the "Define the computers in the pool" screen and the topology builder generates an error that the FQDN I input is already in use in the published topology. Catch 22.

I was thinking that I might be able to delete the edge pool, publish the topology without it.  Then add the new edge pool and publish that.  Server names haven't changed, just the pool FQDN. 

Thoughts?


↧
Viewing all 5984 articles
Browse latest View live
Search
<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>