{"id":13,"date":"2014-03-13T09:03:00","date_gmt":"2014-03-13T09:03:00","guid":{"rendered":"\/post\/2014\/03\/13\/lync-client-will-not-show-contact-photos.aspx"},"modified":"2014-03-13T09:03:00","modified_gmt":"2014-03-13T09:03:00","slug":"lync-client-will-not-show-contact-photos-when-external","status":"publish","type":"post","link":"https:\/\/www.vatland.no\/index.php\/lync-client-will-not-show-contact-photos-when-external\/","title":{"rendered":"Lync client will not show contact photos when external."},"content":{"rendered":"

Installed Lync 2013 on a Windows 2012R2 server. When I login with an external Lync Client there are no photos of internal users. A validation shows that the thumbnailPhoto attribute has bin populated with images of the correct size.<\/p>\n

If the client Connect directly to the frontend server photos are presented correctly.<\/p>\n

An examination of the Lync Addressbook shows the addressbook files and also the photo files. The photo files are renamed jpg files exported from Active Directory. The Lync server create these PHOTO files when a client request photos of users. Since these photos are placed in the addressbook folder they are downloaded through https to the Lync Client. <\/p>\n

Running netstat on Lync front end did not show any TCP Connection from reverseproxy server !<\/p>\n

A network monitor show that connection are reset after half a TLS 1.2 handshake – a strong indication that there is something wrong with ssl\/tls. Revalidated all sertificates and also publishing rules on F5 reverseproxy.<\/p>\n

Used Bing to find any issues regarding TLS 1.2 and Windows 2012 R2, and yes, someone have hade the same issue. Entered registry keys as below – rebooted and now it works –<\/p>\n

To Resolve this issue do the following:<\/font><\/p>\n

– On the Lync 2013 server open the registry and browse to the following location: HKLM\\System\\CurrentControlSet\\Control\\SecurityProviders\\SChannel\\Protocols<\/font><\/p>\n

– Create the following Key under Protocol: TLS 1.2<\/font><\/p>\n

– Create the following two Keys under TLS 1.2: Client and Server<\/font><\/p>\n

– Create the following DWORDs under both the Client and Server Key: DisabledByDefault and Enabled<\/font><\/p>\n

– Under both Client and Server set the following: DisabledByDefault=1 and Enabled =0<\/font><\/p>\n

– Reboot the server.<\/font><\/p>\n

<\/font><\/p>\n

Entering these keys Disables TLS 1.2 on the server forcing the client and server to communicate over TLS 1.1.<\/font><\/p>\n

Good Luck,<\/font><\/p>\n

Matt<\/font><\/p>\n

http:\/\/social.technet.microsoft.com\/Forums\/lync\/en-US\/41718327-203f-445f-8657-87b0a8545ead\/lync-2013-client-signin-issue-with-lync-2013-server?forum=lyncprofile<\/a><\/p>\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

Installed Lync 2013 on a Windows 2012R2 server. When I login with an external Lync Client there are no photos of internal users. A validation shows that the thumbnailPhoto attribute has bin populated with images of the correct size. If the client Connect directly to the frontend server photos are presented correctly. An examination of the Lync Addressbook shows the addressbook … Continue reading Lync client will not show contact photos when external.<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[6,10],"tags":[],"class_list":["post-13","post","type-post","status-publish","format-standard","hentry","category-lync","category-windows"],"aioseo_notices":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_likes_enabled":false,"jetpack-related-posts":[{"id":28,"url":"https:\/\/www.vatland.no\/index.php\/lync-client-will-not-get-past-contacting-server\/","url_meta":{"origin":13,"position":0},"title":"Lync client will not get past “Contacting server….”","author":"Atle","date":"January 6, 2014","format":false,"excerpt":"When you start the Lync Client and won't get past \"Contacting server..\" ,and it never time's out.\u00a0It can be worth checking time on\u00a0client and servers.\u00a0Other users can sign in to Lync, even on the same PC. It will not help removing Lync client certificate, or reset password. Solution here is\u2026","rel":"","context":"In "Lync"","block_context":{"text":"Lync","link":"https:\/\/www.vatland.no\/index.php\/category\/lync\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":57,"url":"https:\/\/www.vatland.no\/index.php\/lync-phone-unable-to-sign-in-after-windows-update-on-lync-server\/","url_meta":{"origin":13,"position":1},"title":"Lync phone unable to sign in after windows update on Lync Server.","author":"Atle","date":"January 2, 2013","format":false,"excerpt":"After update to Root Sertificates ( KB931125) http:\/\/support.microsoft.com\/kb\/931125\u00a0You are constantly getting Warning in the eventlog. Also Lync Phones will be unable to sign in. The error message on the phone is that the \"Registrar FQDN could not be resolved\". UPDATED: On new Phones you will only get a message that\u2026","rel":"","context":"In "Lync"","block_context":{"text":"Lync","link":"https:\/\/www.vatland.no\/index.php\/category\/lync\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":559,"url":"https:\/\/www.vatland.no\/index.php\/lync-server-security-fix-kb3080353-causing-problems\/","url_meta":{"origin":13,"position":2},"title":"Lync server security fix KB3080353 causing problems.","author":"Atle","date":"September 22, 2015","format":false,"excerpt":"(UPDATED) After we installed the Latest Lync server 2013 security fix (Security Update for Lync Server 2013 Web Components Server KB3080353) we have had severeal issues where users where unable to sign in to\u00a0 Lync. This was the server complaining about the client certificate , normally it is the client\u2026","rel":"","context":"In "Lync"","block_context":{"text":"Lync","link":"https:\/\/www.vatland.no\/index.php\/category\/lync\/"},"img":{"alt_text":"LyncCertError","src":"https:\/\/i0.wp.com\/www.vatland.no\/wp-content\/uploads\/2015\/09\/LyncCertError.png?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":14,"url":"https:\/\/www.vatland.no\/index.php\/lync-unified-contact-store-ucs\/","url_meta":{"origin":13,"position":3},"title":"Lync Unified Contact Store – UCS","author":"Atle","date":"March 7, 2014","format":false,"excerpt":"How do I check and enable Lync UCS? First of all you need Exchange 2013 , then\u00a0make sure you have enabled UCS in Lync server. By running get-csuserservicesPolicy and verify it has been set to UCSAllowed=TRUE Next check you client policy. Get-CsClientPolicy should show you \"EnableExchangeContactSync = true\" for the\u2026","rel":"","context":"Similar post","block_context":{"text":"Similar post","link":""},"img":{"alt_text":"USERSP","src":"https:\/\/i0.wp.com\/www.vatland.no\/wp-content\/uploads\/2014\/03\/USERSP-300x71.jpg?resize=350%2C200","width":350,"height":200},"classes":[]},{"id":34,"url":"https:\/\/www.vatland.no\/index.php\/lync-2013-mobile-client-and-response-groups\/","url_meta":{"origin":13,"position":4},"title":"Lync 2013 Mobile client and response groups","author":"Atle","date":"October 30, 2013","format":false,"excerpt":"Have a user logged in on his Lync 2013 mobile client . The use is member of a Respnsegroup. When the someone call this responsegroup Lync mobile client is unable to establish a connection. \u00a0I have found several others that also have this problem, and it seem that this is\u2026","rel":"","context":"Similar post","block_context":{"text":"Similar post","link":""},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":373,"url":"https:\/\/www.vatland.no\/index.php\/lync-dhcp-options-and-windows-2012-r2\/","url_meta":{"origin":13,"position":5},"title":"Lync DHCP options and Windows 2012 R2","author":"Atle","date":"November 22, 2014","format":false,"excerpt":"Recently had a issue where Lync phones (Polycom CX600) using number and pin\u00a0where unable to download the\u00a0CA\u00a0certificate chain. Tethered phones worked fine.\u00a0Some network packet inspection\u00a0revealed that the DHCP server did not provide any of the options 43 information. The client (phone) asked for the correct vendor class \"MS-UC-Client\", but there\u2026","rel":"","context":"In "Lync"","block_context":{"text":"Lync","link":"https:\/\/www.vatland.no\/index.php\/category\/lync\/"},"img":{"alt_text":"Lync2013","src":"https:\/\/i0.wp.com\/www.vatland.no\/wp-content\/uploads\/2014\/05\/Lync2013.gif?resize=350%2C200","width":350,"height":200},"classes":[]}],"_links":{"self":[{"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/posts\/13","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/comments?post=13"}],"version-history":[{"count":0,"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/posts\/13\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/media?parent=13"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/categories?post=13"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.vatland.no\/index.php\/wp-json\/wp\/v2\/tags?post=13"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}