I just finished migrating from Lync 2010 Standard to Lync 2013 Enterprise.

I have the following Servers in my Topology:

1 Front-End

1 Back-End (SQL Database)

1 Edge Server

1 WAC

1 Reversed Proxy (ARR_3.0)

I'm currently having trouble with PowerPoint Sharing and others features such as Poll and Whiteboard for Internal and External Users.

We have 2 Client versions that are being used by our users, Lync 2010 and Lync 2013 Basic Client. Only lync 2013 client are having trouble with the presentation.

Computers Internally are joined to domain. But when I use computer that are not domain joined and using Skype for Business client. The Error was "Can't sign in to Skype for Business. There was a problem verifying the certificate from the server"

Certificate Used: Internal CA and WildCard. Wild Card is beeing used by EDGE external and Reversed Proxy Server.

.............Back to the client presentation error.... 

I got the log on the client and found the following errors:

Error 1. I/O In

SIP/2.0 401 Unauthorized
Date: Mon, 24 Sep 2018 15:31:25 GMT
WWW-Authenticate: NTLM realm="SIP Communications Service", targetname="LetoFrontEnd.newpagcor.com", version=4
WWW-Authenticate: Kerberos realm="SIP Communications Service", targetname="sip/LetoFrontEnd.newpagcor.com", version=4
WWW-Authenticate: TLS-DSK realm="SIP Communications Service", targetname="LetoFrontEnd.newpagcor.com", version=4, sts-uri="https://lync2013pool1.newpagcor.com:443/CertProv/CertProvisioningService.svc"
From: <sip:lync.user2@pagcor.ph>;tag=852225f2a0;epid=576706f365
To: <sip:lync.user2@pagcor.ph>;tag=3271CA61C8AD21D0EC6E6BBFECB1D25A
Call-ID: d894dbfa7b794d1aacac8d67940c06aa
CSeq: 1 REGISTER
Via: SIP/2.0/TLS 192.168.100.19:57984;ms-received-port=57984;ms-received-cid=7000
Server: RTC/5.0
Content-Length: 0

Error 2:

SIP/2.0 403 Forbidden
Proxy-Authentication-Info: Kerberos qop="auth", opaque="CC034702", srand="DF097C61", snum="1", rspauth="040401ffffffffff0000000000000000132b0b11061fdef76519cd81", targetname="sip/LetoFrontEnd.newpagcor.com", realm="SIP Communications Service", version=4
From: <sip:lync.user2@pagcor.ph>;tag=852225f2a0;epid=576706f365
To: <sip:lync.user2@pagcor.ph>;tag=3271CA61C8AD21D0EC6E6BBFECB1D25A
Call-ID: d894dbfa7b794d1aacac8d67940c06aa
CSeq: 2 REGISTER
Via: SIP/2.0/TLS 192.168.100.19:57984;ms-received-port=57984;ms-received-cid=7000
ms-diagnostics: 4004;reason="Credentials provided are not authorized to act as specified from URI";AuthenticatedIdentity="CORPORATE\FDCAdmin";source="LetoFrontEnd.newpagcor.com"
ms-diagnostics-public: 4004;reason="Credentials provided are not authorized to act as specified from URI";AuthenticatedIdentity="CORPORATE\FDCAdmin"
Server: RTC/5.0
Content-Length: 0

Error 3: 

SIP/2.0 401 Unauthorized
Date: Mon, 24 Sep 2018 15:31:26 GMT
WWW-Authenticate: NTLM realm="SIP Communications Service", targetname="LetoFrontEnd.newpagcor.com", version=4
WWW-Authenticate: Kerberos realm="SIP Communications Service", targetname="sip/LetoFrontEnd.newpagcor.com", version=4
WWW-Authenticate: TLS-DSK realm="SIP Communications Service", targetname="LetoFrontEnd.newpagcor.com", version=4, sts-uri="https://lync2013pool1.newpagcor.com:443/CertProv/CertProvisioningService.svc"
From: <sip:lync.user2@pagcor.ph>;tag=9b09120414;epid=576706f365
To: <sip:lync.user2@pagcor.ph>;tag=3271CA61C8AD21D0EC6E6BBFECB1D25A
Call-ID: 6c8edf5f211f438a8fcfba36a864e844
CSeq: 1 REGISTER
Via: SIP/2.0/TLS 192.168.100.19:57985;ms-received-port=57985;ms-received-cid=7100
Server: RTC/5.0
Content-Length: 0

Error 4:

Then, on the FE server Log, I found this Event ID 31055 and 31059.

I found this forum but I guess this is not applicable to me as I have completed the migration already.

social.technet.microsoft.com/Forums/lync/en-US/c96ac7d8-dff1-4dde-9030-be505e276752/lync-2013-error-31055-31059-ls-call-park-service-the-database-being-used-by-group-pickup-is-not?forum=lyncdeploy

Need some advise for this.

Thanks!

Hi,

I added _sipfederationtls._tcp.domain.com on External DNS, Do I also need to to add this to Internal DNS also ? I am using the same domain for internal and external.

Regards

Usman Ghani

Usman Ghani - MCITP Exchange 2010

Hi guys,

so we have an old Skype Server 2013 that are running on SQL 2008 R2 that one want to decommission and move every instance/database to another SQL 2012 server.

Is there any good guide on this? Im guessing one cannot just point out a new database in topology builder?

Thanks!

Hi all, posting after quite long time.

Just want to share some troubleshooting steps for Lync event ID1034.

Issue :- On a fine day mobile users were not able to sign in to our Lync 2013. Investigation lead to remove one FE from LBR and run with rest 2. It worked and mobile users were able to sign in. But when we rebooted the Lync Front End server, Lync FE service don't want to start. We were forced to uninstall the Lync components and redeployed from the deployment wizard. It worked, resorted the service. Same has to be performed for rest 2 FE's as all servers showed the same behavior after a reboot. We were happy that all the services were up and running, but later found out that CMS replication stopped after the re-deployment. 

Analysis :- We found that Replicator agent service is stopped in all FE's. Starting this service won't work. Upon searching the logs, it was found that permission to the Lync share was denied with Event ID1034. 

Solution that worked :- Have to stop the below services in FE server. 

                  1) Lync Server File Transfer Agent

                  2) Lync server replica replicator agent

                  3) Lync server Master replicator agent 

a) Take ownership of X:\RtcReplicaRoot\xds-replica folder. While taking ownership, you are wiping the permission which Lync has to replicate CMS, don't worry about this as we are reinstalling the necessary components to re-apply the permission.

b) Right click on xds-replica folder > security > advanced and change ownership to your logged in ID, please select "Replace owner of sub containers and objects" as well. Once you have access,delete the entire xds-replica folder inside RtcReplicaRoot.

c) Go to Add remove programs or programs & features, and select "Microsoft Lync 2013 Core Components" > right click and do repair. This will create anew xds-replica folder with sufficient permission.

d) Go to services and make sure Replicator service is set to automatic. Then start the 3 services which we stopped at the beginning. 

e) Run Invoke-csManagementStoreReplication and see if CMS status has became True.

Dear Team,

we are using Lync server 2013 - single server only.

then we are using Exchange server 2016 also.

In lync server 2 certificates are Default certificate & OAuthTokenIssuer.

Default certificate successfully renewed. 

but what is the purpose of OAuthTokenIssuer, this certificate also required for renewal? if renewing it will affect any another service like Exchange?

we are trying to renewing it was showing warning POPup. 

Regards, Pradhap P

I have recently installed Lync 2013 with 1 enterprise pool having 2 FE Servers. Internal users are able to login and chat. I added Edge Server for external access, published topology and installed the Server with necessary firewall rules & Certificates. This is a single Edge server with just 1 Ext public  (NATed) IP ( for all 3 Edge Service) published on 3 diff ports ( 5061, 443, 444) which were automatically picked up by lync deployment during topology configuration. same user who is able to login internally is not able to access Lync externally. I tried using Microsoft Remote connectivity tool in both autodiscover and manual mode. In autodiscover mode it gives error - >The certificate couldn't be validated because SSL negotiation wasn't successful. This could have occurred as a result of a network error or because of a problem with the certificate installation.

In manual mode when I enter my SIP domain (sip.domain.com ) and port 5061 it validates certificate but gives error 

Couldn't sign in. Error: Error Message: The operation failed after several attempts..
Error Type: RegisterException.
Deregister Reason: None.

At the same time when this error comes I see an audit failure Event in Event Viewer of Front End server with Event Id 4625

What could be the issue ?

Hello,

Our environment consists of on-prem deployments of Lync 2013 Standard Edition FE and Edge Server updated to the latest CU 10 July 2018. A portion of our users have their mailbox accounts migrated to Exchange Online including their UM account for voicemail. We still have Exhange UM On-prem servers. I understand that TLS 1.0 is being disabled starting 10/31/18 for Exchange Online Services and with that being said, we still have the Lync Phone Edition devices in our environment homed to the On-Prem Lync servers.

Just to reiterate, the LPE devices will NOT be homed to Skype for Business Online.

My understanding is that on 10/31, all LPE devices will not be able to connect to the Exchange Online servers and will affect Visual Voicemail, Calendar and call logs for Exchange Online Users. However, the users will still be able to retrieve voicemail via the LPE devices by dialing their subscriber access number or selecting the 'Call Voice Mail' button on the phone.

Since our on-prem Lync FE and Edge server will still have TLS 1.0 enabled, we will only encounter the limitations stated above. Is this an accurate assumption?

Thank you

Been seeing these event ID's on all our 3 FE servers, particularly in the morning when activity is high. I use Monitoring reports to get details on specific Conference issues that occur. Someone reported a problem this morning and I could not find any problems looking at the Media Quality Summary Report. I noticed the error below on the Lync FE server and it occurred at around the same time the Conference issue was reported. Was wondering if this has something to do with why I did not see any details of the Conference error in the Monitoring reports? Could this be a SQL issue?

We are using Lync Server 2013 in a hybrid setup with Exchange 2010 (Exchange 2016 Hybrid Server) and Exchange Online.
When we set the value HostedVoiceMail value to $true as per the below command, you are then able to use the Skype for Business client to access your Exchange Online voicemail. However, at the next AzureAD sync this value appears to get nulled back to $false.

Set-CsUser -HostedVoiceMail $True -Identity "contoso\billgates"

Also posted here: https://social.technet.microsoft.com/Forums/en-US/577cc8df-e182-45f4-8564-a82e5e3c7bf5/unified-messaging-hostedvoicemail-true-nulled-by-azure-ad-sync?forum=onlineservicesexchange

We are using Lync Server 2013 in a hybrid setup with Exchange 2010 (Exchange 2016 Hybrid Server) and Exchange Online.
When we set the value HostedVoiceMail value to $true as per the below command, you are then able to use the Skype for Business client to access your Exchange Online voicemail. However, at the next AzureAD sync this value appears to get nulled back to $false.

Set-CsUser -HostedVoiceMail $True -Identity "contoso\billgates"

Hello,

I have two Lync server pools, pool 2 is used for DR. I'm seeing an LS Protocol Stack error on my front end servers in pool 2 not able to connect to "at least one service" on our pool 1 edge servers.

LS Protocol Stack, Event ID 14584

Connection attempt to at least one service in a pool failed.

Then it lists both edge servers in pool 1.

Verified both edge servers in pool 1 have all Lync services running. The error doesn't appear on the pool 1 front end servers.

Is this related to certificates?

Hi there !

We installed a Skype for Business Server 2015, and wanted to try to federate and enable connectivity (following that tuto : https://blogs.technet.microsoft.com/canitpro/2015/11/09/step-by-step-skype-connectivity-configuration-with-on-premise-skype-for-business-2015/) but I cannot register on https://pic.lync.com since I don't have yet a licence.

Also, I cannot enable federation on the Topology Builder : https://prnt.sc/lfk8qn (sorry it's in French).

Is there any way to try federation and connectivity on a trial version of Skype for Business Server 2015 ?

Thanks !

Yoann

We have 3 FE , 2 mediation ,  2 EDGE , 2 persistent chat ,

All SQLExpress Edition , and Backed database server is running on 11.0.6020 SP3 Enterprise Edition,

Would like to know is there any impact , or the steps to follow after updating the SQL Express Edition , 

what are the commands need to run after the SQL Express Edition up-gradation.

Thanks in Advance 

-Safvan A Mohamed

Hi,

We have 5 FE servers for Lync 2013. On only one FE server the "Lync Server Front-End" service is stuck at "starting".

Any ideas how to fix ?



Hi,

I have set up SEFAUtil on a computer where I am able to run it and it returns a correct output. Recently we developed an webservice that is running on a different server and needs to make some modification to Lync server using SEFAUtil. However, when trying to invoke the util remotely in PowerShell (or with winrs in cmd), it returns an error message when /verbose parameter is present:

Cannot read contacts from Active Directory: Active Directory error "-2147016672"

However, if no parameters are passed to the util, it successfully prints out its help so this means that the remote command works, but the problem is somewhere between SEFA and Lync server. We have also tried issuing command Enable-PSRemoting, but this did not change the situation.

Is there any way of invoking SEFAUtil remotely and getting the result?

Thanks.

We are having a very strange issue with our Lync environment where several users are displaying "Available - Voice Only" as their status. All of these users are docked into a dock with the CX600 connected via USB. They can make calls and they can also IM with no issues via the Skype for Business app.

One of the main issues is people are complaining that when they type a IM to a person who is "voice only", sometimes they get a rejection saying the person is not IM capable (which would be the normal message if they were not signed into S4B) and sometimes it goes through with no issues.

My environment is 3 different location with each location having a frontend and edge server. so far the only people to complain about it are our internal users in 1 of the 3 locations and not our external users but there aren't many of them.

I don't see anything in regards to the event viewer. I have not tried to OCS logger to analyze the failures. Has anyone else seen this issue? Before I go down the rabbit hole of

Hi guys,

I want to share my experience/issue with Skype for Business Server. I am migrating a demo environment from Lync Server 2013 to Skype for Business Server, and when I tried to do the upgrade in-place on the Edge Server I got this error message:

XmppServer: Assigned certificate not found or untrusted. Check that the certificate exists in the certificate store, that it is not expired and that the certificate chain is valid.

Same message if I run Get-CsCertificate. Xmpp is disabled on my topology so when I ran "Set-CsCertificate -Type XmppServer -Thumbprint XXXXXXXXXXXXXXXXXXXXXXXX" I got:

Set-CsCertificate : Command execution failed: The computer does not need a certificate for the usage type XmppServer. Check the services and components hosted on this computer.

My solution was enable Xmpp on the Topology Builder, replicate, run Set-CsCertificate, and run upgrade in-place again.

Then I removed Xmpp from my topology and Edge.

Someone with the same problem?

Dario Woitasen | MCSE Lync Server 2013/Exchange Server 2013 | MCITP: Enterprise Messaging Administrator 2007/2010, Lync Server 2010 Administrator, Office 365 | MCSA Windows Server 2012

Lync Gurus,

I am trying to install Motioning on our Lync 2013 new install, this is a enterprise install, separate SQL db and front end. its a fresh install of 2012 standard on both systems and of SQL 2012 on the DB server.

Both fire walls have been turned off and both servers are not running any AV (yet) or anything other than Lync, its requirements and SQL. the user (lync.monitor) is domain admin, and has every right i could find on the DB.

The DB called monitor is up and you can log in, both LcsCDR and QoEMetrics are present and can be accessed by the SQL studio

When i install monitoring on the Front end i get the following

> Deploying Monitoring Reports... This might take a few minutes.

The Monitoring Database is using SQL instance "{DB servername}\monitor".

The data source is using SQL instance "(local)\monitor".

The following URL will be used for deployment: http://{DB Servername}:80/ReportServer_MONITOR
SQL Server logon credentials for "{domain name}\lync.monitor" already exist. Use the existing logon credentials.

"[QoEMetrics]" role "[ReportsReadOnlyRole]" has already assigned to "martindalepharm\lync.monitor".

"[LcsCDR]" role "[ReportsReadOnlyRole]" has already assigned to "martindalepharm\lync.monitor".
Start to deploy reports...

The report server cannot open a connection to the report server database. A connection to the database is required for all requests and processing. --->

Microsoft.ReportingServices.Library.ReportServerDatabaseUnavailableException: The report server cannot open a connection to the report server database. A connection to the database is required for all requests and processing.

An error occurred when deploying Monitoring Reports. For details, see the log.

As this didnt work i tried installing on the DB server   

> Deploying Monitoring Reports... This might take a few minutes.

The Monitoring Database is using SQL instance "{DB servername}\monitor".

The data source is using SQL instance "(local)\monitor".

The following URL will be used for deployment: http://{DB server name}:80/ReportServer_MONITOR
SQL Server logon credentials for "{domainname}\lync.monitor" already exist. Use the existing logon credentials.

"[QoEMetrics]" role "[ReportsReadOnlyRole]" has already assigned to "martindalepharm\lync.monitor".

"[LcsCDR]" role "[ReportsReadOnlyRole]" has already assigned to "martindalepharm\lync.monitor".

Start to deploy reports...

System.Web.Services.Protocols.SoapException: The report server cannot open a connection to the report server database. 

A connection to the database is required for all requests and processing. ---> Microsoft.ReportingServices.Library.ReportServerDatabaseUnavailableException: The report server cannot open a connection to the report server database. A connection to the database is required for all requests and processing.

at Microsoft.ReportingServices.Library.Global.EnsureModeFromCatalog()

at Microsoft.ReportingServices.Library.Global.EnsureRSNativeMode()

at Microsoft.ReportingServices.WebServer.ReportingService2005..ctor()

An error occurred when deploying Monitoring Reports. For details, see the log.

Now, the log button is grayed out on both (odd, where is it kept?)

I am sure i have missed something obvious, thoughts, help fixes?

Thanks

Mike