Replacement for TMG reverse proxy.

Are you looking for a replacement for TMG now that its end is nearing. You could buy a thirdparty reverseproxy from Sophos og some appliance. The simplest solution is probably to install a Windows server 2012(R2) and add ARR module to IIS.

To install this module you would use the
Microsoft Web Platform Installer

All information you will need are at the IIS web site : http://www.iis.net/downloads/microsoft/application-request-Routing

Lync client will not get past “Contacting server….”

When you start the Lync Client and won’t get past “Contacting server..” ,and it never time’s out. It can be worth checking time on client and servers. Other users can sign in to Lync, even on the same PC. It will not help removing Lync client certificate, or reset password. Solution here is to check date and time on Lync server and Client – if it is Office365 it is your Client that has wrong time. 

Are my Lync server 2013 database the correct version?

You installed a update to your Lync 2013 server and wonder if the database has to be updataed (install-csdatabase….).

Run :

Test-CsDatabase -ConfiguredDatabases -SqlServerFqdn sqlserver.fq.dn | Select DatabaseName, ExpectedVersion, InstalledVersion

Result:
DatabaseName               ExpectedVersion            InstalledVersion
————               —————            —————-
rtcxds                     15.13.1                    15.13.1
rtcshared                  5.0.1                      5.0.1
rtcab                      62.42.2                    62.42.2
rgsconfig                  5.5.1                      5.5.1
rgsdyn                     2.2.1                      2.2.1
cpsdyn                     1.1.2                      1.1.2
xds                        10.13.2                    10.13.1
lis                        3.1.1                      3.1.1
As you can see there are a version conflict. You should update the database.

In this example the Central Management Database is not up to date. Check Microsoft TechNet KB 2809243 for the correct procedure: 

Install-CsDatabase -CentralManagementDatabase -SqlServerFqdn CMS.FQDN -SqlInstanceName DBInstanceName -Verbose

User are unable to dial out as a responsgroup in Lync 2013

We defined a responsegroup workflow for anonymity. One user are a member of the Group (His Lync Client stated that for us.) When he select to call out as this queue he immediatly get the messeage that he is removed from the group.  On the monitoring server we get the message that he do not have permission – even when we are sure that he has.

We found out that this user has had his sip address changed some time. When we check the Lync sql instance “Rtc”, Database rgsconfig and table ado.Agents we found one entry with his old SIP address. Deleted this row from the table and ran a update-csuserdatabase. The new SIP address is imported into the database and now it works.

Lync 2013 will not replicate CMS

After you installed Lync 2013 on a Windows 2012 / Windows 2013 R2 Configuration management store will not replicate.

You think that it has something to do with the certificates but they seem ok. You will probably try to genereate new certificates to be sure, no… did’t help.

 The reason is the new way Windows 2012 handles the certificate store. For a technical description have a look at Technet article : http://technet.microsoft.com/en-us/library/hh831771.aspx .

If you just want things to start working add this registry key :

REG_DWORD “ClientAuthTrustMode” under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\Schannel and set it to value = 2 .

Or run this PowerShell command from an elevated PowerShell prompt:

New-ItemProperty -Path HKLM:\system\CurrentControlSet\Control\SecurityProviders\SCHANNEL

-Name ClientAuthTrustMode -Value 2 -PropertyType DWORD

 

The trust mode controls how validation of the client’s certificate chain is performed .

Contributed by Jan Helge Austbø

Hyper-V VM startup error. Evnet ID 12030

Error starting Hyper-V VM :

I decieded to delete the VHDX file of a Virtual machine and create a new. The purpose was to do a reinstall, and keep the old file incase I needed som files.

After creating the new VHDX file I tried to start the virtual machine and I got this error.

Event ID 12030 : Failed to start.

 This is no known user to me.

The Hyper-V console gives a descriptive error :

 Permission denied.

The only thing that have changed was the creation of a new vhdx file, so I checked the permissions of the VHDX file.

 This is the default permission for files in this folder.

Added the user acccount I saw in the eventviewer. This user account have the same username as the Virtual-Machine ID.

 I used ICACLS to add the permissions.

icacls “V:\vms\Virtual Hard Disks\2012web.vhdx” /grant “NT VIRTUAL MACHINE\18020765-68E5-4082-9439-F39BB26CB4C7:(r,w)”

 Permissions after I added the entry.

 

Hyper-V creates a local user for each Virtual-Machine as a Security precausion.

 

 

Lync 2013 Mobile client and response groups

Have a user logged in on his Lync 2013 mobile client . The use is member of a Respnsegroup. When the someone call this responsegroup Lync mobile client is unable to establish a connection.

 I have found several others that also have this problem, and it seem that this is by design – not supported. According to Technet : http://technet.microsoft.com/en-us/library/gg398674.aspx

Clients that are supported :

  • Lync 2013
  • Lync 2010
  • Lync 2010 Attendant
  • Office Communications Server 2007 R2 Attendant
  • Lync Phone Edition

Missed Call notification from Lync missing in users mailbox.

A new install of Lync and Exchange. Enabled enterprise voice and Unified Messaging. Useres never get missed call notifications in their mailbox. On the exchange server there where several entries in the eventviewer complaining about smtp and voice mail files.

 

Solution to this is to verify that the receive connector that exchange itself uses is enabled With “Exchange Server authentication”. Most common issue is that som admin has created a relay connector and defined a IP subnet in the “network” tab, and this IP network contains the IP address of the exchange server. You can verify witch connector that is used by Exchange by examining the smtp log file.

Update: 

Also verify that the CA trust list is not to large as i pointed out in my Lync post : https://www.vatland.no/post.aspx?id=24303d6b-a29e-432c-b448-3dac2779bd14

 

-MS Stuff-