Thursday, December 20, 2012

Move CMS from Lync 2010 to Lync 2013

When we introduce Lync 2013 on Lync 2010 infra CMS will be on Lync 2010.So if we want to move the CMS to new 2013 pool here is the steps.
For safer part we can take config backup using export-csconfig and export-cslisconfig.
Next step is to install CMS store new Lync 2013 pool for that run the below command.

Install-Csdatabase -centralmanagementdatabase -usedefaultsqlpaths -sqlserverfqdn <backendsqlserverfqdn>

Next step is to move CMS server.


If the source cms server is offline you can use below command.

Move-CsManagementServer -ConfigurationFileName "C:\" -LisConfigurationFileName "C:\" -Force

Thursday, November 22, 2012

Lync with Cisco VCS Integration/HD Integration

Most of the organisation wil be having High defnition conference feature available.So the users who are using Lync they can utilise that feature using Lync client easily with below steps.The document is svailable on Cisco sites but still below one will be an easy refernce for you.

First you need to add VCS domain as truted application in Lync topology then only Lync will accept request from VCS.

Here is command to make VCS as trusted application:
1- Add application pool
New-CsTrustedApplicationPool -Identity <vcsdomainfqdn> -Registrar LyncFEPool -site <Sitenumber you want to integrate> -RequiresReplication $false -ThrottleAsServer $true -TreatAsAuthenticated $true

2- Add application
New-CsTrustedApplication -ApplicationID VCSApplication1 -TrustedApplicationPoolFqdn <vcsdomainfqdn> -Port 5061
3- Set The encryption Level.
set-CsMediaConfiguration -EncryptionLevel supportencryption
4- Create static route to route the request towards VCS.
$Route1=New-CsStaticRoute -TLSRoute -Destination "vcsdomainfqdn" -MatchUri "domainname" –Port 5061 -UseDefaultCertificate $true
Set-CsStaticRoutingConfiguration -Identity global -Route @{Add=$Route1}

Above part is from Lync side.Same way need to configure Cisco VCS to accept lync request.
Once both side configured you can dial conference number from Lync and enjoy the conference from your Desk.

Wednesday, November 21, 2012

Port Requirements for Lync 2010 Application sharing with external user

For Small buisness network this topic may not be that much usefull,but for a Large enterprise with restricted network setup this will be very usefull.Below requirements i captured using lot of testing and network tracing.When i recieved this requirement there was no articles clearly mentioned about how we can achieve this,all was mentioned some specific ports for application wise.

Scenario:Users are sitting in a restricted network.User only have text IM access with othere users as well as federation/external users.Requirement here is to application sharing with external/federated users.After the study i concluded with below ports for application sharing with external users.

Public to edgeserver:




TCP/50,000-59,999 (Outbound only)
From the internal Client to the internal Edge:

TCP - 443
UDP – 3478
Above ports for only to conference and Media traffic from internal user to External user.
If you wanted to have internal conference between 2 restricted netwok users below is the port requirements.
Client to Front End Pool
49152 to 57500
49152 to 65535
Client to AV Pool
49152 to 57500
57501 to 65535

Monday, November 12, 2012

Lync 2010 User provisioning using AD Attributes

When it comes to Large setup you may need to provision users using some thirdparty tools or any other scripts.Here i faced major challenge like tried with dfault attributes but it was not success.User was showing not enabled for Lync access.

Below is the attributes i enabled initially.

msRTCSIP-UserEnabled: TRUE
msRTCSIP-FederationEnabled: TRUE
msRTCSIP-InternetAccessEnabled: TRUE
msRTCSIP-OptionFlags: 257

But it failed to enable users in Lync.Finally after lot of try i got solution like i need to enable default user policy also.below is the attribute which we need to enable.


Hope this will help you to enable using AD attributes or using FIM or any other provisioning tools.

Set Media Port Ranges in Lync

Here i am explaining this mainly for Enabing QoS for Lync services.If your organization is with large network this is necessary to limit lync Media traffic into a defined port ranges.SO this QoS can be enabled inall network appliances and assign the bandwidth from the network level.
Below is the commands to set the mediaports in Lync 2010

Client Ranges

Set-CsConferencingConfiguration -ClientMediaPortRangeEnabled 1
Set-CsConferencingConfiguration -ClientAudioPort 20000 -ClientAudioPortRange 40 -ClientVideoPort 20040 -ClientVideoPortRange 40 -ClientAppSharingPort 20080 -ClientAppSharingPortRange 40 -ClientFileTransferPort 20120 -ClientFileTransferPortRange 40 -ClientMediaPort 20160 -ClientMediaPortRange 40

Lync Pools

Set-CsConferenceServer -Identity <PoolFQDN> -AppSharingPortStart 40803 -AppSharingPortCount 8348

Set-CsApplicationServer -Identity <PoolFQDN> -AppSharingPortStart 40803 -AppSharingPortCount 8348


Thursday, November 8, 2012

SQL Server Cannot open user default database Login Failed

As a Lync support person you might need to handle some SQL issues. Most of the cases you want to move database here and there because of the disk space issue or for proper allocation of disk. Here i faced a challenge while doing LCSLOG database movement from one disk to another Disk.

I have detached the database and copy the database in another disk after that i was not able to login to SQL management studio. I was getting "Cannot open user default database.Login Failed error".

I thought my SQL got corrupted ,After lot of search i got the solution like below.

Open SQL Managemnet Studio
Select options tab

Now change the connect to database to master or any available database on your setup

Now click on connect and it will successfully log you in. Once you login in the system run following statement for your username and it should fix your problem. Make sure to replace [test] with your username and master with yourdatabase name.




Thursday, November 1, 2012

Intermittent AOL PIC issue in Lync

Initially when we configured Lync fo Public IM communication we have recieved lot of omplaints from users related IM failed when the communicate with AOL users.After Lot of touble shooting found one solution and it helped me to resolve our issue.

In order to resolve this, you need to change the Cipher Suite order used by Windows such that TLS RSA with RC4 128 MD5 is tried first.
In order to change the Cipher Suite order, do the following on your Access Edge server:
  1. Launch the Group Policy Object Editor using: Start --> Run -> gpedit.msc
  2. Within the Group Policy Object Editor, traverse down to; Computer Configuration --> Administrative Templates --> Network --> SSL Configuration
  3. Click on SSL Configuration, and then double-click on SSL Cipher Suite Order (by default, the SSL Cipher Suite Order is set to "Not Configured")
  4. Select the “Enabled” radio button, and in the in the SSL Cipher Suites text box, copy the entire string into Notepad.
  5. Find  TLS_RSA_WITH_RC4_128_MD5, in the list and cut and paste it to the first item in the list.  (Be sure to take the trailing comma with it so you don't end up with a ",," in the list)
  6. Paste the newly-formatted string back into the text field in the GPO Editor, click OK
  7. Restart (reboot) the Lync Access Edge server for these changes to take effect.
Thanks for below Link.

Saturday, October 13, 2012

Lync Server 2010 Cumulative Update 7

Microsoft has realeased new Lync 2010 Cumulative update on October 2012.
It fixes multiple issues reported till date,below are the major features of new update.

1-New Media Quality Comparison Report in Monitoring server
2-Call Leg media Quality report addition in Monitoring
3-Mobile user status showing as inactive in some users.

Also it fixing some invalid meeting URL error and some other web component issues.

Thursday, September 27, 2012

What's New Lync 2013

Below is the some major feature about Lync 2013 Preview
  • Full IPv6 support
  • VDI plugin, allowing full A/V support in virtual desktop environments
  • H.264 SVC codec support
  • Skype federation support
  • Persistent chat (or group chat) becomes a "full-fledged" Lync service, not just a bolted-on add-on
  • Audio and video added to Lync Web App
  • Consolidation of roles; no separate server role needed for monitoring and archiving
  • Hybrid deployments of on-premises and Lync Online cloud servers now supported (this capability is called "hybrid voice")
  • Support for M-N trunk routing, plus support for inter-trunk routing. Lasko explains: "This feature allows Lync to act as an intermediary between two or more different phone systems. For example, Lync can accept calls from one PBX, and pass the call through to another PBX. This can be very useful in larger environments and allows Lync to be the backbone of a corporate telephone network."
  • Support for a unified contact store, with information maintained in MIcrosoft Exchange Server 2013, enabling users to access/manage contacts from Lync 2013 Preview, Outlook or Outlook Web App

Wednesday, September 12, 2012

Remove + from FromURI or RequestURI in Lync 2010

Some of the call manager will not suppot when lync initiate call with +symbol in both to and From URI's(E.164).In such cases You can remove the + from lync side while sending to the call manager or gateway.

ToURI + you can strip from the trunk configuration using GUI.Like below.

But to remove + from FromURi there is  no option available in GUI mode.Format will be something  like this.from<sip:+12345@.....>.In this case gateway or call manager may not acept such request.
This option you can change using powersehell script.Run the get-cstrunkconfiguration.You will get output like below.

Here in the image highlighted seeting we need to make it as true.So it will remove + before sending to Call manager or gateway.Command will be like this.Set-CStrunk configuration -identity "test" RemovePlusFromUri $true.Now the Header wil be like From<Sip:12345@.....>to<.....>

Monday, June 4, 2012

Change Lync Database default path

This is one of the major topic which i faced lot of issues.I tried multiple time to create databse using install-csdatabase command but it always create database its on logic.not wher you want.So after lot of study i found a solution and moved databse in to proper disks where i required.
Here in my case most of the databses created in C drive.I wanted create in E drive.Find the below steps how i achived the same.
Logon to SQL server
Open SQL managemnet Studio
Click on New Query
Follow the Steps Below
Note down the database path
  use rtcab
Detatch the databse
   use master
   sp_detach_db 'rtcab'

Lync Simultaneous ring Leads to grabbled voicemail

When you enable simultaneous ring in lync client and your not answered the will get a grabbled voice mail.
This issue is because your ifrastructure configuration mismatch of lync and call manager.below is the solution for this issue.
Go to UM dial plan o your Unified messaging server configuration.In general tab go to VOIP security settings select secured insted of SIP secured.

This solved my issue.Hope this will Help you also.

If this solved your issue dont forget to write down your feedback here..........

Thursday, April 12, 2012

Unified Messaging Service Not Starting

After installing Unified Messaging Role on Exchange 2010 the Unified Messaging service is not starting.Getting below Error.

The Microsoft Exchange Unified Messaging service was unable to start. More information: "Microsoft.Exchange.UM.UMService.UMServiceException: No certificate was found using the thumbprint '' specified in the UMCertificateThumbprint property of the UMServer object.

at Microsoft.Exchange.UM.UMService.UMConnectionManagerHelper.TLSConnectionManager.Initialize()

at Microsoft.Exchange.UM.UMService.UMService.InitializeConnectionManager()

at Microsoft.Exchange.UM.UMService.UMService.StartService()

at Microsoft.Exchange.UM.UMService.UMService.OnStartInternal(String[] args)"

For this issue First thing you need to check poper certificate is available in local system.
If certificate availbale Follow the below steps.
Go to Exchange management Console
Open Server configuration
Click on Unified Messaging
Click on the server
Go to right pane
Click on Assign certificate option
Follow the wizard and select the decided certificate.
Start the Service again.. it is started right??????

Dont forget to put feedback.

Wednesday, March 28, 2012

Lync 2010 Power Shell Commands

Approve-CsDeviceUpdateRuleApproves a device update rule that has been imported to the system. After a device update rule has been approved, the corresponding update will automatically be downloaded and installed by client devices affected by the update.Link
Clear-CsDeviceUpdateFileDeletes any rejected device update files that are no longer associated with a device.Link
Clear-CsDeviceUpdateLogDeletes all the Device Update Web service log and audit files that are older than the specified number of days.Link
Debug-CsLisConfigurationDisplays the Enhanced 9-1-1 (E9-1-1) Location Information service (LIS) configuration in XML format.Link
Disable-CsAdDomainUndoes the domain preparation tasks carried out by the Enable-CsAdDomain cmdlet. This cmdlet is typically used only if you are uninstalling Microsoft Lync Server 2010 from a domain.Link
Disable-CsAdForestUndoes the forest preparation tasks carried out by the Enable-CsAdForest cmdlet. This cmdlet is typically used only if you are uninstalling Microsoft Lync Server 2010.Link
Disable-CsComputerDisables a service or server role that has been removed from a computer running Microsoft Lync Server 2010.Link
Disable-CsHostingProviderDisables a hosting provider currently in use in your organization. A hosting provider is a third-party organization that provides instant messaging, presence, and related services for a domain that you would like to federate with. Hosting providers, such as Microsoft Lync Online 2010, differ from public providers (such as Yahoo!, MSN, and AOL) in that their services are not offered to the general public.Link
Disable-CsPublicProviderDisables a public provider configured for use in your organization. A public provider is an organization that provides instant messaging, presence, and related services to the general public. Microsoft Lync Server 2010 ships with three public providers configured but not enabled: Yahoo!; AOL; and MSN.

Force to use Lync Web App for conferences

If you have lync 2010 instaled on your system ,when you click on join conference URL it will launch your Lync 2010 client.What will happen some other organisation send you the link to join conference?you will not be able to join the meeting.
If you dont have Lync 2010 in your system you wil get below screen

So this will give you the option to join the meeting.But for such above case it is difficult because Lync default behaviour is like that.So if you want to force the use of Lync web app follow the below steps
simply add ?sl= to the meeting URL
The Lync Client will not launch and you can choose to run Lync Web App

Thursday, March 22, 2012

User count in Lync using Powershell

To get the number of users enable for lync run the below command

Get-CsUser -OnLyncServer | Measeure


(Get-CsUser -OnLyncServer).count

To get the list of enterprise voice enabled users run below commands

get-csuser -Filter {EnterpriseVoiceEnabled -eq $true}

For count

get-csuser -Filter {EnterpriseVoiceEnabled -eq $true} | Measure

Wednesday, March 21, 2012

Limit number of Contacts user can have in Lync

If you want to set the number of contacts a user can have please go though below steps.

To check the current configuration run below commands.It will display the current limit


Result will be like

MaxContacts: 250

Set contacts limit in global lvele follow the below comands

Set-CsUserServicesConfiguration –Identity global –MaxContacts 750

To create new policy follow the below steps

New-CsUserServicesConfiguration –Identity site:Redmond –MaxContacts 400

To create pool level find below commands

New-CsUserServicesConfiguration –Identity service:UserServer:Servername –MaxContacts 100

 To find out number of contacts for a user use the Lync resource kit tool.There is no powershell script available.

Run below command from the command prompt wher the resource kit directory

DBAnalyze.exe /> c:\output.txt

Sunday, March 11, 2012

SQL Server 2008 Installation Giving Access Denied Error

When I tried to Install SQL 2008 server in windows 2008 server i was continously getting Access denied error perticularly Database engine.I tried with multiple instances and added the service account in local administrator group,but still failing.After long trial and error last came with solution below.

The AccessChk tool will print all privleges for an account ( by running:
accesschk.exe -a <Domain>\<Account> *
Alternatively, we can check this through your group policy editor as mentioned below:
Open Group Policy...
Start | Run | Type: gpedit.msc | OK |
Navigate to
Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment\Debug programs

The account through which we are trying to run the setup should be here ( besides the local admin on that machine). I included that here, restarted the server ( this is mandatory, gpupdate /force will not work) and ran the setup and it was successful this time.
SQL Server 2008 setup needs this privilege to start up the SQL Server process and listen to an event that signals back to setup that SQL Server successfully started

Wednesday, March 7, 2012

Lync Push Notification not working in Mobile Clients

Most Of the time Lync URL Filter setting causing the issue.Blow option woked for me.Lets have a Try!
Option 1
  1. Open the Lync Server Control Panel (LSCP)
  2. Choose the IM and Presence feature from the LSCP menu
  3. Select the URL Filter page button
  4. On the Edit URL Filter - Global page, choose the Do not filter option as the Hyperlink prefix
  5. Click on the Commit button
 Option  2
  1. Open the Lync Server Control Panel (LSCP)
  2. Choose the IM and Presence feature from the LSCP menu
  3. Select the URL Filter page
  4. Leave the Send warning message option chosen as the Hyperlink prefix
  5. Click on the Select... button for the Filter these hyperlinks prefixes: feature
  6. On the Select Hyperlink Prefix page, expand the HTTP Hyperlink prefixes
  7. Remove the check mark from the http: and https: hyperlink prefixes
  8. Click on the OK button
  9. On the Edit URL Filter - Global page, click on the Commit button

Note the following Lync Server 2010 PowerShell cmdlets can be used to remove hyperlink prefixes using the Lync Server Management Shell:
  • Set-CsImFilterConfiguration -Identity -Prefixes @{remove="http:"}
  • Set-CsImFilterConfiguration -Identity -Prefixes @{remove="https:"}

Tuesday, March 6, 2012

Configure UAG Direct Access for Lync 2010

An NRPT exception consists of a fully-qualified DNS name that has no associated DirectAccess DNS Server address. This tells the DNS client to resolve the excepted name using its normal interface-configured DNS server instead of following the more general rule and sending the query to the internal DNS server.
The example below, output from the netsh namespace show policy command on a DirectAccess-enabled client, shows an exception followed by a more general rule:
Settings for
Certification authority :
DNSSEC (Validation) : disabled
DNSSEC (IPsec) : disabled
DirectAccess (DNS Servers) :
DirectAccess (IPsec) : disabled
DirectAccess (Proxy Settings) : Bypass proxy

Monday, March 5, 2012

Lync Server Front End Service Failed to Start

After installing Lync Front End server some times it wont start.Some time it will start and stop.
Some time it will give error like failed to start.Service code 1008193023
To resolve this problem, follow these steps to enable cross-database ownership chaining for the RTC database and for the RTCdyn database:
  1. On a computer that is running Microsoft SQL Server, connect to the RTC database, and then run the following SQL command from SQL Server Management Studio:
    "sp_dboption rtc, 'db chaining', TRUE"
  2. Connect to the RTCdyn database, and then run the following SQL command from SQL Server Management Studio:
    "sp_dboption rtcdyn,  'db chaining', TRUE"
  3. Start the Front End services.

Sunday, March 4, 2012

Export user details in Lync 2010 using Powershell

List of users

Get-CsUser | select-object SipAddress,LineUri,EnterpriseVoiceEnabled  ..etc

List all users who are Enterprise Voice Enabled, and have a Dial Plan of Calgary

Get-CsUser -Filter {EnterpriseVoiceEnabled -eq $True} | where {$_.DialPlan -match "Calgary"}

List all users with phone number where their AD telephone number contains xxx

Get-CsAduser -Filter {Phone -like "*xxxx"} | select-object DisplayName,Phone

Count Enterprise Voice Users with a Phone Number

(get-csuser -OnLyncServer -Filter {EnterpriseVoiceEnabled -eq $true} | Where-Object {$_.LineURI –match "tel:+"} ).count

Export a List of Enterprise Voice Users

get-csuser -Filter {EnterpriseVoiceEnabled -eq $true} | export-csv evenabled.csv

Saturday, February 11, 2012

Lync 2010 Limited Functionality error

This issue i have faced 3 or 4 times.But i haven't seen solution anywher in the net.First it took more time to identify the issu.So i thought this may help people like me.

First you verify the databse status from Backend sql managemnet studio.
Status of rtc and rtcdyn databse.This problem because of inconsistencies in rtcdyn databse.
If the problem started after Lync CU4 update then run the second command mentioned in lync kb article to restore the rtcdyn databse.Mostly this will resolve the issue.

Still You are facing the issue and you are not seing any ubnormalities in the databses please verify the permission of rtcdyn database.RTCUniversalservice shoud have read write permission on rtcdyn database

Last option is to stop all front end services.Login to Backend server,drop the rtcdyn database and create the database using install-csdatabase -update command from the lync fronend server.

Hope this will help you.Any updates please comment.............

Prepare Lync Schema Using command

Use the Install-CsAdServerSchema cmdlet to extend the Active Directory schema. After schema preparation is complete, manually verify that the schema partition has been replicated before proceeding to forest preparation.

To use cmdlets to prepare the schema of the current forest
  1. Log on to a computer in the forest as a member of the Schema Admins group and with administrator rights on the schema master.
  2. Install Lync Server Core components as follows:
    1. From the Lync Server 2010 installation folder or media, run Setup.exe to start the Lync Server Deployment Wizard.
    2. If you are prompted to install the Microsoft Visual C++ Redistributable, click Yes.
    3. The Microsoft Lync Server 2010 Setup dialog box prompts you for a location to install the Lync Server 2010 files. Choose the default location or Browse to a location of your choice, and then click Install.
    4. On the License Agreement page, check I accept the terms in the license agreement, and then click OK. The installer installs the Lync Server 2010 Core Components.
  3. Start the Lync Server Management Shell: Click Start, click All Programs, click Microsoft Lync Server 2010, and then click Lync Server Management Shell.