I have finished with deployment of Lync Standars 2013 with Office Web Apps Server, Single Consolidated Edge and Reverse Proxy Servers. Setup is working fine for internal users.
Before i publish this externally, i want to verify that everything will also work perfectly fine in that case. Is there any method other that connectivity varifers?
Hi Team,
I am facing one issue, I had install one Standard edition Lync 2013 and one Office web Apps server.
However when I am sharing PPT with one user I am getting on message.
" Either you've lost network connectivity or our server is too busy to handle your request. please check your network connection and try again later"
Though network is very fine and only three users are enable on lync server so no overhead on Lync FE server.
Please reply.
your comments are much appreciated.
Thanks.
rizwan
hi,
I am facing problem in Lync Edge / Reverse Proxy Server Certificate. I have installed a Public Certificate on both the servers. However, external users get warning for certificate at the time when of login. Seems either Edge or Proxy Server are not configured to use Public Certificate. I have also set binding in IIS. What else should I check?
Hi All,
Does anybody knows any limitations to restore the Lync Front End from the virtual image? Lync itself I feel does not care about that. But question is what about the SQL Express? Is there any risk that we could lost the SQL's master DB and get the local SQL instances down?
Petri
This question came up during a recent team meeting. We currently have Lync 2013 on-prem at two datacenters with a separate front-end pool in each which are configured for pool-pairing. Ive read that only enterprise edition pools can be paired together.
In the future we may roll out Lync online and convert to a Lync hybrid solution...which leads me to my question. Is it possible to pair an on-prem enterprise front-end pool to a Lync online pool for DR purposes? I'll admit that my familiarity with Lync online isnt up to par but the more I think about this Im leaning toward that it isnt possible.
Id really appreciate it if someone could provide an answer and include any supporting urls.
Dave
Hi Guys,
I was troubleshooting an issue with lyncdiscover and lyncweb. The main issue was even though I was setting up a reverse proxy, I was getting the correct certificate for lyncdiscover.domain.com but the internal certs were showing up for lyncweb and meet...I
I was troubleshooting and now I am getting internal 500 errors on lyncdiscover and lyncweb...meet still works oddly enough. Any ideas?
We have a Lync 2010 environmnet but need to move to lync 2013 ent. For reasons I won't go into, coexistence won't work.
It must reside in the same domain/forest, so I need to, in one weekend decom the old lync 2010 deployment and put into production our new lync 2013 deployment.
We used public certs for all certs. (don't ask), and will be using public certs for the new lync 2013 deployment. What will need to be done to make sure there's a smooth transition on the DNS/certs front?
We will be using new names/fqdns for all things if possible like a new front end and edge pool names, server names obviously, external web services, etc. What about sip.domain.com? I know thats on the access edge/"SIP" interface. Also , it is defined in SRV records internally, externally, etc.
I'd rather not mess with decomming the old certs on that weekend. Can I just use a different name? How built into Lync is the name "sip.domain.com"?
Thanks,
Josh
I have created a PowerShell script that automates enabling users for Lync and setting policies based on group membership. I've successfully tested this script under my domain admin account and now I am working on getting it running as a scheduled task.
Since all the script really does related to Lync is run the commands Enable-CsUser, Set-CsUser, and Grant-Cs<policy name>Policy, I elected to create a service account that only has Lync user administration permissions. Initially, this user account was just a member of CSUserAdministration but this was not working so I added the user to RTCUniversalUserAdmins based on some other information I found.
This change got me by the various access denied errors I was getting in the script, but now I am getting the following error when I run the Enable-CsUser part:
Enable-CsUser : The EXECUTE permission was denied on the object 'XdsPublishItems', database 'xds', schema 'dbo'. At line:1 char:1+ Enable-CsUser -Identity <redacted> -RegistrarPool <redacted> - ...+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~+ CategoryInfo : NotSpecified: (:) [Enable-CsUser], SqlException+ FullyQualifiedErrorId : System.Data.SqlClient.SqlException,Microsoft.Rtc.Management.AD.Cmdlets.EnableOcsUserCmdl et
This seems to be some sort of permission error related to the permissions on the SQL database "xds". I checked, and RTCUniversalUserAdmins is a member of both CsUserAdministration and RTCUniversalReadOnlyAdmins. This latter group does have permissions on the xds database. It appears to be granted the "public" role on the database server. The User Mapping shows the following users mapped to the login:
Even though I receive this error, the user is actually added to Lync. Follow-up Set-CsUser and Grant-Cs<policy name>Policy cmdlets succeed just fine.
What do I need to do to fix this error message?
Hi all,
I recently enabling IM for a newly created user, but the user cannot sign in. After searching for the root cause, it is appear that user has been created in my AD before and then being deleted.
The thing is, when i enable IM of the new created user, the lync database still store old SID of that user id (i used dbanalyze).
I only has 1 front end server, no pool, i use cleanupstorageservicedata command but it prompts errorfound unexpected number of front end for routing group: 1.
Anyone know how is the exact steps to remove this specific orphaned SID from Lync database?
If I manage to connect to RTC database using Management Studio, which table and/or what SQL query to delete this specific sip user?
Thanks.
Hi All,
This is more of a discussion then a question. what is the best practice for deploying a single Lync Pool with mutiple locations (sites) where users are moving around between sites all the time.
The situation: One single Lync Pool, 3 Sites in 3 locations with 1 gateway at each site.
Easy, create a Dial Plan for each site and assign these gateways so that calls go out of the correct gateway.
The Problem: user A is in Site 1 and can dial local numbers using Gateway 1, when the same user now moves to Site 2, they should be using Gateway 2 to dial local numbers.
Thanks for your feedback in advance.
Hany Elkady
Infrastructure Consultant
Hi,
Couble of weeks ago I changed the Lync file share location. It went smootly, but since then the backup service as not been so happy.
PS C:\> (Get-CsBackupServiceStatus -PoolFqdn pool.internal.com).BackupModules
Identity
ExportStatus ImportStatus
--------
------------ ------------
UserServices.PresenceFocus SteadyState
NormalState
ConfServices.DataConf NonSteadyState ErrorState
On the event log I can find reqular events (path is always the same):
Log Name: Lync Server
Source: LS Backup Service
Event ID: 4049
Level: Error
Description:
Microsoft Lync Server 2013, Backup Service data content backup module failed to import a change entry.
Change type: CreatedOrUpdated. Change path:
\\OldFileStore.internal.com\LyncShare\1-WebServices-34\CollabMetadata\{6CC9728C-94E0-40CE-AFE0-941974147A23}\FWQVN08B\Serialized.dat.
Exception: System.Exception: Journal entry path
\\OldFileStore.internal.com\LyncShare\1-WebServices-34\CollabMetadata\{6CC9728C-94E0-40CE-AFE0-941974147A23}\FWQVN08B\Serialized.dat is not recognizable.
I have once already took the pool pairing of, and made it again. But above event appears every 10 mins into Event log.
I tried to use msUSmeNOW advices as well, but there were nothing for these :(
And on the application log I can see the following:Petri
Hi,
I Build an Lync 2013 set up with FEpool, Director pool and Exchange server is integrated. I have windows 8 client machine, with Lync client installed. When I try to login to the lync client, I am getting error like"There was a problem verifying certificate from the server".
When I installed ROOT CA cert manually on client machine I am able to login to the lync client. similarly if I add my client machine in my domain, I am able to login to the Lync client.
Now is there any other way to send the certificate automatically to the client machine (Which are NOT part of the DOMAIN) from the server, instead of manual installation process.
Please help me troubleshoot this problem
Hi,
I have 3000 users with chat, audio, video, conferencing, no EV, No pstn.
only 10% of users will be using conferencing.
1. do i need 3000 standard and 3000 enterprise CAL, as we need Enterprise cal for conferencing.
can i take only 300 enterprise CAL for conferencing ? will it create any issue?
2. Can i use lync 2013 basic client as its free, will users will face any issue with respect to features used.?
We just set up federation with Microsoft and we apparently can't share video or audio. IM is working great.
I suspect it is a problem with the single IP, three port setup that we have on our Edge. We also don't have the 50K range open, I understand that that's only for partners still using OCS 2007 but I've heard conflicting info on that.
Here is our Edge setup:
Access Edge service:
FQDN - accessedge.mydomain.com
IP – 192.168.x.y
Port – 5061 (TLS)
Web Conferencing Edge Service info:
FQDN - accessedge.mydomain.com
IP – 192.168.x.y
Port – 444 (TLS)
A/V Edge Service info:
FQDN - accessedge.mydomain.com
IP – 192.168.x.y
NAT enabled public IP – public IP
Port – 443 (TCP)
So all the internal IPs are the same, and there's a public IP tied to the A/V service.
All the services on the Edge are started except "Lync Server Audio/Video Edge" which starts and then stops (and it tells me that it's supposed to do that) when I try to start it.
I can telnet into 5061, 444, and 443 from the Internet to the accessedge.mydomain.com FQDN.
Again, 50K range has not been opened. I made that decision based on the size of the firewall tech's eyeballs when I asked if we could open ten thousand ports. Don't believe we'll need to talk to anyone on OCS2K7 anyways.
Anything else I can check?
Thanks,
Brandon
Hi all
I am designing a Lync deployment for a small org (circa 800 users) obviously they keep banging on about HA/resiliency etc
my initial design was a pair of standard edition servers in a single (tier 3) datacentre (with dual edge servers), they keep insisting they require a 50/50 split across a second datacenter
so obviously with Enterprise Edition it is possible to have a high degree of resiliency both in and between datacenters - but at some cost and with massive server bloat - seems over engineered
and if you do it with SE server - I,e split the SE server between datacenters you loose any resiliency in each datacentre - and presumably if a server needs maintenance etc then you need to fail over the entire userbase from one datacentre to the other
what are people views on this - I still think the paired SE topology in a single datacentre is the best compromise (the WAN with be fully resilient too)
do I have any other options
Hello Everyone,
After I upgraded Lync to 2013 I'm receiving errors related to the Call Pickup database even though I have updated the database and the CMS according to Microsoft's KB...http://support.microsoft.com/kb/2809243
First Error
The database being used by Group Pickup is not the appropriate version.
The database is not the correct version:
Connection: Data Source=sqlb1\Lync2013;Initial Catalog=cpsdyn;Integrated Security=True
Expected... SchemaVersion: 1, SprocVersion: 1, UpgradeVersion: 2
Actual... SchemaVersion: 0, SprocVersion: 0, UpgradeVersion: 0
Cause: The database has not been upgraded.
Resolution:
Upgrade the database to CU1.
Second Error
There was a problem communicating with the Group Pickup backend database.
There were problems accessing SQL server:
Connection: Data Source=sqlb1\Lync2013;Initial Catalog=cpsdyn;Integrated Security=True
Message: The EXECUTE permission was denied on the object 'DbpGetVersionSchema', database 'cpsdyn', schema 'dbo'.
Error code: -2146232060
Error number: 229
Cause: This may be caused by connectivity issues with the backend database.
Resolution:
Check if SQL backend is running and accepts connections from Group Pickup.
Third Error
The database being used by Group Pickup is not the appropriate version.
The database is not the correct version:
Connection: Data Source=sqlb1\Lync2013;Initial Catalog=cpsdyn;Integrated Security=True
Expected... SchemaVersion: 1, SprocVersion: 1, UpgradeVersion: 2
Actual... SchemaVersion: 0, SprocVersion: 0, UpgradeVersion: 0
Cause: The database has not been upgraded.
Resolution:
Upgrade the database to CU1.
Fourth Error
There was a problem communicating with the Group Pickup backend database.
There were problems accessing SQL server:
Connection: Data Source=sqlb1\Lync2013;Initial Catalog=cpsdyn;Integrated Security=True
Message: The EXECUTE permission was denied on the object 'DbpGetVersionSchema', database 'cpsdyn', schema 'dbo'.
Error code: -2146232060
Error number: 229
Cause: This may be caused by connectivity issues with the backend database.
Resolution:
Check if SQL backend is running and accepts connections from Group Pickup.
I would appreciate any help on this.
Mohammed JH
I'm looking to optimize the selection of the exchange mailbox server that's handling auto attendant operation. As far as I can tell, everything is at least functionally working fine.
I have two sites:
Site A has my lync 2013 servers plus my exchange cas and an exchange mailbox server.
Site B has an exchange mailbox server.
When the lync server contacts the exchange cas to route the auto attendant call, the cas is always directing the call to the site B Exchange mailbox server.
Unlike regular user mailboxes, I can see no way to assign the auto attendant to a specific server or a way to set some sort of priority of the mailbox servers. How do I redirect such calls to the site A exchange mailbox server?
-mick
Hi,
I have one question... how uninstall a Lync Server 2013 deployment?
Thks!!!
We have setup MS hosted Lync 2013 on a client with 30 users. This has worked well but on 2 machines the client will freeze when ending a video or audio chat. I have tried everything I can think of including:
Reinstalled Lync multiple time. Also tried volume version.
Updated Lync to latest version by windows update.
Removed Citrix receiver as this has been listed as causing conflicts.
Updated video and webcam drivers. They purchased the same webcam on every machine (Logitech C920)
Tested as another profile on the machine.
Disabled and removed antivirus (Eset NOD32)
Both machines having issues are recent Dells, one a Latitude E6520 and the other a Dell OptiPlex 980. Both are running Windows 7 x64.
Any suggestions what to try next would be most appreciated.
Thanks,
Chris
We've recently deployed a Lync 2013 server, published a toplogy and confirmed basic functionality. We are now attempting to activate a third-party software, Audiocodes SPS. The activation fails with the following error in powershell:
Please wait while loading lync module...
Lync 2013 identified
Computer LYNCSVR01.domain is not part of trusted application pool
Creating trusted application pool 'sps-pool-2013-1.domain' homed on site '1'
(Boston) with registrar 'Registrar:lyncsvr01.domain'
New-CsTrustedApplicationPool : System.Xml.Schema.XmlSchemaValidationException:
There is a duplicate key sequence 'lyncsvr01.domain' for the
'urn:schema:Microsoft.Rtc.Management.Deploy.Topology.2008:MachineFqdn' key or
unique identity constraint.
At C:\Program Files\Audiocodes\SPS\SPS
Core\Powershell\SpsActivationFuncs.ps1:288 char:12
+ $Pool = New-CsTrustedApplicationPool -Identity $SpsPoolFqdn
-Site $SiteId.Sit ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~
+ CategoryInfo : InvalidData: (:SourceCollection) [New-CsTrustedA
pplicationPool], Exception
+ FullyQualifiedErrorId : FailedSchemaValidation,Microsoft.Rtc.Management.
Xds.NewTrustedApplicationPoolCmdlet
PS C:\Windows\system32>
I can't find much specific information on this, and all I intuit is that we've got a dupe FQDN somewhere in AD. MS documentation doesn't explain much, only that we should open a ticket. Can anyone point me in the right direction?
Thanks,
Drew