EWS trouble on some Lync 2013 users

I have an issue where some users gets this error all the time. From the FrontEnd server
Storage Service had an EWS Autodiscovery failure.
StoreWebException: code=ErrorEwsAutodiscover, reason=GetUserSettings failed,
smtpAddress=[email protected], Autodiscover Uri=https://autodiscover.domain.com/autodiscover/autodiscover.svc, Autodiscover WebProxy=<NULL>, WebExceptionStatus=ConnectFailure ---> System.Net.WebException: Unable to connect to the remote server --->
System.Net.Sockets.SocketException: No connection could be made because the target machine actively refused it.
For most of the users this Works fine, but I have seen on my computer it Works fine and I have alle the settings in registry:
"cacheVersion"=dword:00000003
"WasSoapBased"=dword:00000001
"WasWsSecurityBased"=dword:00000001
"InternalAvailabilityServerUrl"=""
"InternalOofServerUrl"=""
"InternalEwsUrl"=""
"InternalEcpUrl"=""
"InternalBasicEcpUrl"=""
"InternalPhotoUrl"=""
"InternalServerVersion"=dword:73808888
"ExternalAvailabilityServerUrl"="https://outlook.office365.com/EWS/Exchange.asmx/WSSecurity"
"ExternalOofServerUrl"="https://outlook.office365.com/EWS/Exchange.asmx/WSSecurity"
"ExternalEwsUrl"="https://outlook.office365.com/EWS/Exchange.asmx/WSSecurity"
"ExternalEcpUrl"=https://outlook.office365.com/ecp/?rfr=olk&p=customize/voicemail.aspx&exsvurl=1&realm=domain.com
"ExternalBasicEcpUrl"="https://outlook.office365.com/ecp/"
"ExternalPhotoUrl"="https://outlook.office365.com/EWS/Exchange.asmx/s"
And some does not have this at all. Well then they get no information in registry. Why? The user is "local admin" and the strange is that this has stopped working for some of the users who had no problem, and then Lync status will ofcourse not
change according to Meeting in Exchange.
We have on the server side the latest patch for Lync 2013 and on the Client side as well.
Anyone got an advise?

These problem users can’t locate exchange autodiscover.
Check if these uses can connect EWS externally.
Please check if Lync 2010 can obtain EWS URL.
Check the following KB
http://support.microsoft.com/kb/2814251/en-us
Lisa Zheng
TechNet Community Support

Similar Messages

Lync 2013 User Presence Unknown in OCS 2007 R2 Client

Lync 2013 User Presence Unknown in OCS 2007 R2 Client
OCS users had reported that they can’t view the presence status of some Lync 2013 users in OCS client, presence unknown. I found one of FE01 server that registration for those Lync 2013 users have that effect on OCS client. I shut down FE01 server to force
Lync 2013 users to register to another FE02 server. After Lync 2013 users signed in again (Connected Lync Server has been changed to: FE02), OCS client can view their presence. However I still don't found the root cause, when I run Test-CsRegistration in both
FE server. The FE02 passed, but FE01 show the following error. I checked the same certificate was imported to FE01/FE02.
Target Fqdn   : ###########.com
Result        : Failure
Latency       : 00:00:00
Error Message : Unable to perform authentication of credentials.
                Inner Exception:NegotiateSecurityAssociation failed, error: -2146893053
Diagnosis     :
VERBOSE: Workflow 'Microsoft.Rtc.SyntheticTransactions.Workflows.STRegisterWorkflow' started.
Workflow 'Microsoft.Rtc.SyntheticTransactions.Workflows.STRegisterWorkflow' completed in '6.26E-05' seconds.
An exception 'Unable to perform authentication of credentials.' occurred during Workflow Microsoft.Rtc.SyntheticTransactions.Workflows.STRegisterWorkflow execution.
Exception Call Stack:    at Microsoft.Rtc.Signaling.SipAsyncResult`1.ThrowIfFailed()
   at Microsoft.Rtc.Collaboration.LocalEndpoint.EndEstablish(IAsyncResult result)
   at Microsoft.Rtc.SyntheticTransactions.Activities.RegisterActivity.InternalExecute(ActivityExecutionContext executionContext)
   at Microsoft.Rtc.SyntheticTransactions.Activities.SyntheticTransactionsActivity.Execute(ActivityExecutionContext executionContext)
   at System.Workflow.ComponentModel.ActivityExecutor`1.Execute(T activity, ActivityExecutionContext executionContext)
   at System.Workflow.ComponentModel.ActivityExecutorOperation.Run(IWorkflowCoreRuntime workflowCoreRuntime)
   at System.Workflow.Runtime.Scheduler.Run()
   at Microsoft.Rtc.Internal.Sip.SipAuthenticationHelper.NegotiateSecurityAssociation(SecurityAssociationBase sa, String inputString, ContextFlags inContextAttributes, String& outputString)
   at Microsoft.Rtc.Internal.Sip.ProtocolAuth.DoProtocolOutgoingNegotiation(SecurityAssociation sa, SipMessage message, ChallengeData challengeData)
   at Microsoft.Rtc.Internal.Sip.AuthenticationControlModule.NegotiateSecurityAssociation(SecurityAssociation sa, SipMessage message, NegotiateArgs negotiateArguments)
'RegisterActivity2' sequence activity started.
'RegisterActivity2' sequence activity completed in '6.01E-05' seconds.
'Register' activity started.
Sending Registration request:
Target Fqdn      = #######.com
User Sip Address = sip:#####@####.com
Registrar Port = 0.
Authentication Type 'IWA' is selected.
'UnRegister' activity started.
'UnRegister' activity completed in '0.0004703' seconds.
VERBOSE: Workflow Instance ID '4fb4f7ee-de24-432b-b758-c4abd2010794' completed.
VERBOSE: Workflow run-time (sec): 0.2430276.
Does anyone know what does the error code 2146893053 means? Many Thanks.

Hi,
Please check if all services started on FE01.
It may cause by the issue of registrar authentication. Please also check if Registrar Setting click all authentication on FE01 Lync Server Control Panel.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Questions in setting up Security group policies for Lync 2013 Users

Hi Team,
One of our customer looking for the below requirements:
ü
B>>> Being able to split users in to groups. Would like to be able to split in to Departmental groups, the groups will be Service Delivery, Finance, Business Development, Clinical Services, Radiologists,
SLA Team, Call Handlers.
ü
B>>> Being able to control which users are able to contact or see other users. For example Limit Radiologists to only be able to see Service Delivery and Call Handlers
We know that RBAC policies can be used by Administrator or Technicians who works remotely. However, a user sitting at a server running Lync Server is not restricted by RBAC.
Question:
Is there a way we can fulfill the above customer requirements in Lync 2013 environment?

Hi,
On Lync Server side, what you can do is to change the AD attribute msRTCSIP-GroupingID. You can set different value for different groups. Then each group will not able to search the users in other groups with user name. However, they can still search the
users in other groups with the sip address.
More details:
http://blogs.msdn.com/b/jcalev/archive/2012/06/07/partitioning-lync-address-book-using-msrtcsip-groupingid.aspx
Best Regards,
Eason Huang
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Eason Huang
TechNet Community Support

Lync 2013 user appears twice in Lync, once with all features, a second time with only the option to make a voice call

Hi,
I'm using 15.0.4551.1007.
A user appears twice in my contact search but in the second instance he has a phone icon and I can only make a video call to the user.
His contact card only shows a phone number in 'Other'. The number appears in his other contact card but not in the same format.
I suspected he is somewhere in my contacts but a search found nothing. He's not listed twice in the Exchange GAL either.
Where can Lync be getting this information? it doesn't happen to every user and he's enabled the same way as everybody else in Lync.
Thanks,
rudif

Open Lync option, click Personal tab. Choose None under Personal information manager.
Then sign out and sign in to check if you can see the contact twice for the specific user.
Please also check if other users have this issue. If they do have, the problem locates on the address book server or Active Directory.
If only you have this problem, try to delete the Lync cached file for you user.
Lisa Zheng
TechNet Community Support

Trouble with some custom SystemD/User unit files

Good evening all,
I'm trying to move programs out of my .xinitrc file and my window manager's startup hooks into systemd user unit files for ease of management, and hopefully more resilient. I have followed the setup on the wiki page for SystemD/User session (https://wiki.archlinux.org/index.php/Sy … asic_setup) and already have some services already running:
╭─vendion@tyre ~
╰─➤ systemctl --user status
● tyre
State: degraded
Jobs: 0 queued
Failed: 4 units
Since: Fri 2014-08-08 20:23:47 EDT; 4 days ago
CGroup: /user.slice/user-1000.slice/[email protected]
├─3200 /usr/lib/systemd/systemd --user
├─3202 (sd-pam)
├─dbus.service
│ ├─ 3623 /usr/bin/dbus-daemon --session --address=systemd: --nofork --nopidfile --systemd-activation
│ ├─ 3711 /usr/lib/at-spi2-core/at-spi-bus-launcher
│ ├─ 3728 /usr/bin/dbus-daemon --config-file=/etc/at-spi2/accessibility.conf --nofork --print-address 3
│ ├─ 3996 /usr/lib/at-spi2-core/at-spi2-registryd --use-gnome-session
│ ├─ 4184 /usr/lib/GConf/gconfd-2
│ └─29638 /usr/bin/dunst
├─udiskie.service
│ └─3389 /usr/bin/python /usr/bin/udiskie
├─spideroak.service
│ ├─3394 /opt/SpiderOak/lib/SpiderOak
│ └─3993 /opt/SpiderOak/lib/SpiderOak --spider
├─skype.service
│ └─3396 /usr/lib32/skype/skype
├─mpd.service
│ ├─3386 /usr/bin/mpd --no-daemon
│ ├─3959 /usr/bin/pulseaudio --start --log-target=syslog
│ └─4178 /usr/lib/pulse/gconf-helper
├─mpdscribble.service
│ └─3544 /usr/bin/mpdscribble
└─google-musicmanager.service
└─3638 /usr/bin/google-musicmanager
Some of them are using unit files provided by the package, others I wrote the unit file for. The services that are failing that are causing the state to be degraded are:
╭─vendion@tyre ~
╰─➤ systemctl --user --failed
UNIT LOAD ACTIVE SUB DESCRIPTION
●clipit.service loaded failed failed Clipboard manager
●pasystray.service loaded failed failed Pulseaudio system tray icon
●pidgin.service loaded failed failed Pidgin IM client
●redshift.service loaded failed failed Redshift display colour temperature adjustment
LOAD = Reflects whether the unit definition was properly loaded.
ACTIVE = The high-level unit activation state, i.e. generalization of SUB.
SUB = The low-level unit activation state, values depend on unit type.
4 loaded units listed. Pass --all to see loaded but inactive units, too.
To show all installed unit files use 'systemctl list-unit-files'.
I had to write the unit files for each of these.
clipit.service unit file: http://sprunge.us/Qjfd
When I check the status for this here is what I get:
● clipit.service - Clipboard manager
Loaded: loaded (/home/vendion/.config/systemd/user/clipit.service; enabled)
Active: failed (Result: start-limit) since Fri 2014-08-08 20:24:04 EDT; 4 days ago
Main PID: 3619 (code=exited, status=1/FAILURE)
Aug 08 20:24:04 tyre systemd[3200]: clipit.service: main process exited, code=exited, status=1/FAILURE
Aug 08 20:24:04 tyre systemd[3200]: Unit clipit.service entered failed state.
Aug 08 20:24:04 tyre systemd[3200]: clipit.service holdoff time over, scheduling restart.
Aug 08 20:24:04 tyre systemd[3200]: Stopping Clipboard manager...
Aug 08 20:24:04 tyre systemd[3200]: Starting Clipboard manager...
Aug 08 20:24:04 tyre systemd[3200]: clipit.service start request repeated too quickly, refusing to start.
Aug 08 20:24:04 tyre systemd[3200]: Failed to start Clipboard manager.
Aug 08 20:24:04 tyre systemd[3200]: Unit clipit.service entered failed state.
pasystray.service unit file: http://sprunge.us/BWWR
Status output
● pasystray.service - Pulseaudio system tray icon
Loaded: loaded (/home/vendion/.config/systemd/user/pasystray.service; enabled)
Active: failed (Result: start-limit) since Fri 2014-08-08 20:24:12 EDT; 4 days ago
Main PID: 3769 (code=killed, signal=TRAP)
Aug 08 20:24:12 tyre systemd[3200]: pasystray.service: main process exited, code=killed, status=5/TRAP
Aug 08 20:24:12 tyre systemd[3200]: Unit pasystray.service entered failed state.
Aug 08 20:24:12 tyre systemd[3200]: pasystray.service holdoff time over, scheduling restart.
Aug 08 20:24:12 tyre systemd[3200]: Stopping Pulseaudio system tray icon...
Aug 08 20:24:12 tyre systemd[3200]: Starting Pulseaudio system tray icon...
Aug 08 20:24:12 tyre systemd[3200]: pasystray.service start request repeated too quickly, refusing to start.
Aug 08 20:24:12 tyre systemd[3200]: Failed to start Pulseaudio system tray icon.
Aug 08 20:24:12 tyre systemd[3200]: Unit pasystray.service entered failed state.
pidgen.service unit file: http://sprunge.us/KgKV
Status output
● pidgin.service - Pidgin IM client
Loaded: loaded (/home/vendion/.config/systemd/user/pidgin.service; enabled)
Active: failed (Result: start-limit) since Fri 2014-08-08 20:24:04 EDT; 4 days ago
Main PID: 3620 (code=exited, status=1/FAILURE)
Redshift.service unit file: http://sprunge.us/IDCC
Status output:
● redshift.service - Redshift display colour temperature adjustment
Loaded: loaded (/home/vendion/.config/systemd/user/redshift.service; enabled)
Active: failed (Result: start-limit) since Fri 2014-08-08 20:23:58 EDT; 4 days ago
Docs: http://jonls.dk/redshift/
Main PID: 3517 (code=exited, status=1/FAILURE)
Aug 08 20:23:57 tyre systemd[3200]: redshift.service: main process exited, code=exited, status=1/FAILURE
Aug 08 20:23:57 tyre systemd[3200]: Unit redshift.service entered failed state.
Aug 08 20:23:58 tyre systemd[3200]: redshift.service holdoff time over, scheduling restart.
Aug 08 20:23:58 tyre systemd[3200]: Stopping Redshift display colour temperature adjustment...
Aug 08 20:23:58 tyre systemd[3200]: Starting Redshift display colour temperature adjustment...
Aug 08 20:23:58 tyre systemd[3200]: redshift.service start request repeated too quickly, refusing to start.
Aug 08 20:23:58 tyre systemd[3200]: Failed to start Redshift display colour temperature adjustment.
Aug 08 20:23:58 tyre systemd[3200]: Unit redshift.service entered failed state.
I know that my unit files for these services work because if I manually start them with "systemctl --user start <service>" then they work just fine, but when systemD is trying to start them when I login they fail. I have dbus setup like the wiki says to, and "DBUS_SESSION_BUS_ADDRESS" is defined. I also have the DISPLAY environment variable set in /etc/systemd/system/[email protected]/display.conf like the wiki suggests as well. I know that SystemD user sessions still may not be ready for prime time but I could use a better way to manage these startup programs than the .xinitrc file.
Thanks in advance for any help

i suppose there is a code whitch resets the default bounds when
the component is beeing added to the JTable.Technically, the Component returned by the getCellRendererComponent() is not added to the JTable, it's just used as a rubber stamp.Mmm, I was wrong: at least with the basic L&F, the Component is (temporarily) added to a CellRendererPane, which is a children of the JTable.
Moreover, I witnessed that both setBounds() and doLayout() are called before the component is actually painted...
I've never used a compound component as a renderer, but I assume the issue is common (did not have time to search nor try it myself). You may investigate whether the JPanel is appropriately laid out, by inserting some breakpoints/logs at appropriate places (setBounds, doLayout,...)Did this on an extra-short example, and it did render correctly...
somehow the textfield's bounds where not set anymore.Note that the Javadoc for Cellrendererpane states that +"After the component is painted it's bounds are reset to -w, -h, 0, 0 so that, if it's the last renderer component painted, it will not start consuming input"+.
That does not explain why the w and h are 0, but at least it's clear that depending on where you put your logging statement makes a big difference about the accuracy of the bounds logged

EWS not deployed anymore to Lync 2013 Desktop Clients, Mobile Clients still working fine

Hello dear community,
the subject of EWS in conjunction with Lync 2013 has been discussed a lot here .
However, I could not find here any solution for my problem and I'm (almost) at my end.
Following scenario - 1 x Lync 2013 BE server, 1 x Lync 2013 Edge server, 1 x reverse proxy (IIS ARR). This Lync 2013 deployment
was installed about two months ago and integrated into existing IT landscape. Everything worked wonderfully - desktop and mobile clients were able to connect from inside and outside our organization, EMS was deployed to both desktop and mobile clients.
After that there are no any configuration changes made on Lync server, and yesterday, shortly before an important presentation
I've found, that EWS is not deployed anymore on all desktop clients. Mobile clients, however, continue to function smoothly.
I have tried the following: restart Lync and reverse proxy servers - without success, Lync Connectivity Analyzer shows all
green (internal and external), all relevant tests with Microsoft Remote Connectivity Analyzer were passed, also analysis using Wireshark brought nothing.
I must to say that a week ago I installed SP3 for Exchange 2010 - can it may be because? Also appears more
times a day the following error message in Event Viewer on the back-end server (language of operation system is German):
Protokollname: Lync Server
Quelle:        LS Storage Service
Datum:         05.12.2013 19:23:14
Ereignis-ID:   32054
Aufgabenkategorie:(4006)
Ebene:         Fehler
Schlüsselwörter:Klassisch
Benutzer:      Nicht zutreffend
Computer:      SERVER-11.Speedpoint.local
Beschreibung:
EWS-AutoErmittlungsfehler im Speicherdienst.
ExchangeAutodiscoverException: code=ErrorEwsAutodiscover, reason=GetUserSettings
failed, smtpAddress = xxx, Autodiscover Uri=https://autodiscover.xxx.de/autodiscover/autodiscover.svc, Autodiscover WebProxy=<NULL> ---> Microsoft.Exchange.WebServices.Data.ServiceRequestException: The request failed.
Das Stammelement ist nicht vorhanden. ---> System.Xml.XmlException: Das Stammelement ist nicht vorhanden.
   bei System.Xml.XmlTextReaderImpl.ThrowWithoutLineInfo(String res)
   bei System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   bei System.Xml.XmlCharCheckingReader.Read()
   bei Microsoft.Exchange.WebServices.Data.EwsXmlReader.Read()
   bei Microsoft.Exchange.WebServices.Autodiscover.AutodiscoverRequest.InternalExecute()
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei Microsoft.Exchange.WebServices.Autodiscover.AutodiscoverRequest.InternalExecute()
   bei Microsoft.Exchange.WebServices.Autodiscover.AutodiscoverService.InternalGetUserSettings(List`1 smtpAddresses, List`1 settings, Nullable`1 requestedVersion, Uri& autodiscoverUrl)
   bei Microsoft.Exchange.WebServices.Autodiscover.AutodiscoverService.GetSettings[TGetSettingsResponseCollection,TSettingName](List`1 identities, List`1 settings, Nullable`1 requestedVersion, GetSettingsMethod`2 getSettingsMethod, Func`1 getDomainMethod)
   bei Microsoft.Exchange.WebServices.Autodiscover.AutodiscoverService.GetUserSettings(List`1 smtpAddresses, List`1 settings)
   bei Microsoft.Exchange.WebServices.Autodiscover.AutodiscoverService.InternalGetSoapUserSettings(String smtpAddress, List`1 requestedSettings)
   bei Microsoft.Exchange.WebServices.Autodiscover.AutodiscoverService.GetUserSettings(String userSmtpAddress, UserSettingName[] userSettingNames)
   bei Microsoft.Rtc.Internal.Storage.Exchange.ExchangeContext.SendGetUserSettingsRequest(StoreContext ctx, String smtpAddress)
   --- End of inner exception stack trace ---
   bei Microsoft.Rtc.Internal.Storage.Exchange.ExchangeContext.SendGetUserSettingsRequest(StoreContext ctx, String smtpAddress)
   bei Microsoft.Rtc.Internal.Storage.Exchange.ExchangeContext.GetUserEwsSettings(StoreContext ctx, String smtpAddress, CacheMode cacheMode)
Ursache: Der AutoErmittlungs-URI war nicht richtig konfiguriert oder nicht erreichbar. Eventuell besteht ein Problem mit dem Proxy, oder andere Fehler liegen
vor.
Lösung:
Überprüfen Sie die Ereignisdetails. Überprüfen Sie, ob der URI des AutoErmittlungsdiensts ordnungsgemäß konfiguriert und erreichbar ist. Prüfen Sie, ob die Proxyeinstellungen ordnungsgemäß konfiguriert sind und der Proxy erreichbar ist. Prüfen Sie die Konfiguration
der AutoErmittlung zwischen Lync und Exchange Autodiscovery anhand des Handbuchs zur Problembehandlung. Wenn das Problem weiterhin besteht, wenden Sie sich mit den Ereignisdetails an das Supportteam Ihrer Organisation.
Ereignis-XML:
< Event xmlns="">
<System>
    <Provider Name="LS Storage Service" />
    <EventID Qualifiers="53158">32054</EventID>
    <Level>2</Level>
    <Task>4006</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-12-05T18:23:14.000000000Z" />
    <EventRecordID>19949</EventRecordID>
    <Channel>Lync Server</Channel>
    <Computer>SERVER-11.Speedpoint.local</Computer>
    <Security />
</System>
<EventData>
    <Data>ExchangeAutodiscoverException: code=ErrorEwsAutodiscover, reason=GetUserSettings failed, smtpAddress=xxx, Autodiscover Uri=https://autodiscover.xxx.de/autodiscover/autodiscover.svc, Autodiscover WebProxy=<NULL> --->
Microsoft.Exchange.WebServices.Data.ServiceRequestException: The request failed.
Das Stammelement ist nicht vorhanden. ---> System.Xml.XmlException: Das Stammelement ist nicht vorhanden.
   bei System.Xml.XmlTextReaderImpl.ThrowWithoutLineInfo(String res)
   bei System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   bei System.Xml.XmlCharCheckingReader.Read()
   bei Microsoft.Exchange.WebServices.Data.EwsXmlReader.Read()
   bei Microsoft.Exchange.WebServices.Autodiscover.AutodiscoverRequest.InternalExecute()
   --- Ende der internen Ausnahmestapelüberwachung ---
   bei Microsoft.Exchange.WebServices.Autodiscover.AutodiscoverRequest.InternalExecute()
   bei Microsoft.Exchange.WebServices.Autodiscover.AutodiscoverService.InternalGetUserSettings(List`1 smtpAddresses, List`1 settings, Nullable`1 requestedVersion, Uri& autodiscoverUrl)
   bei Microsoft.Exchange.WebServices.Autodiscover.AutodiscoverService.GetSettings[TGetSettingsResponseCollection,TSettingName](List`1 identities, List`1 settings, Nullable`1 requestedVersion, GetSettingsMethod`2 getSettingsMethod, Func`1 getDomainMethod)
   bei Microsoft.Exchange.WebServices.Autodiscover.AutodiscoverService.GetUserSettings(List`1 smtpAddresses, List`1 settings)
   bei Microsoft.Exchange.WebServices.Autodiscover.AutodiscoverService.InternalGetSoapUserSettings(String smtpAddress, List`1 requestedSettings)
   bei Microsoft.Exchange.WebServices.Autodiscover.AutodiscoverService.GetUserSettings(String userSmtpAddress, UserSettingName[] userSettingNames)
   bei Microsoft.Rtc.Internal.Storage.Exchange.ExchangeContext.SendGetUserSettingsRequest(StoreContext ctx, String smtpAddress)
   --- End of inner exception stack trace ---
   bei Microsoft.Rtc.Internal.Storage.Exchange.ExchangeContext.SendGetUserSettingsRequest(StoreContext ctx, String smtpAddress)
   bei Microsoft.Rtc.Internal.Storage.Exchange.ExchangeContext.GetUserEwsSettings(StoreContext ctx, String smtpAddress, CacheMode cacheMode)
< /Data>
</EventData>
< /Event>
However Event ID
32054
was actually
always there
– even
when everything
worked fine -
but with
some another content.
That's why I
don't know
if I
should take it seriously.
Thanks a lot in advance for your help!

Hi MiF,
The issue may cause by the Network Service account that the Lync Storage Service uses does not have access to the private key in used by the oAuth certificate. Please do with the following steps:
Open MMC and add the “Certificates” Snap-in (Local Computer)
Open Personal | Certificates and find the the Certificate being used for OAuth (use the Lync “Get-CsCertificate -Type OAuthTokenIssuer” cmdlet to find the serial number of the OAuth certificate).
Right-click | “All Tasks” | “Manage Private Keys”
Add Permissions for “Network Service” account (the defaults Full control and Read).
Please also check registry key on client computer.
If the HKCU\Software\Microsoft\ Office\15.0\Lync \[User SMTP Address]\Autodiscovery registry key does not exist on the user’s workstation, then it likely means that one of the following failures
have occurred:
Lync was unable to locate a valid DNS A record or SRV record for the Autodiscover site
Certificate assigned to Autodiscover site is not trusted by the Lync workstation
More details:
http://www.microsoft.com/en-in/download/confirmation.aspx?id=15668
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Lync 2013 - EWS not deployed external

Greetings!
Is there a way how to track the reason why Lync2013 client connecting over EDGE has status of EWS not deployed?
Lync 2013 Standard FE
Lync 2013 Edge
TMG
Exchange 2010
Have followed this instructions:
http://www.b4z.co.uk/lync-2013-ews-with-forefront-tmg-2010-issues.html/comment-page-1
On the TMG rules: Outlook web access, Outlook anywhere, I have deleted /autodiscover/* and /ews/* path and created a new rule,
which is connecting to a public addresses: autodiscover.company.com and owa.company.com, and on firewall rule under authentication tab selected: No delegation but client may authenticate directly.
Created also a new listener which has: No authenticaton.
PROBLEMS:
Before doing that we had a problem that Lync2013 client connecting outside LAN got a pop-up credentials and no matter what you have typed, it didn't accept it.
Now credentials pop-up is not appearing anymore, but the status of EWS is not deployed.
And we are also having another problem because we had deleted EWS and AUTODISCOVER on Outlook Web access firewall rule and on Outlook anywhere, now Outlook clients
connecting outside LAN without VPN are unable to get OOF working.
Any hints?
bostjanc

Hi Lisa!
Thank you for your reply.
Output of the command: Get-AutodiscoverVirtualDirectory -Server FQDN | fl name,InternalURL,ExternalURL
Name : Autodiscover (Default Web Site)
InternalUrl :
https://owa2010.company.com/autodiscover/autodiscover.xml
ExternalUrl :
https://owa2010.company.com/autodiscover/autodiscover.xml
Domain username is: [email protected]
SIP address is: [email protected]
Output of the command Get-WebServicesVirtualDirectory -Server FQDN | fl name,InternalURL,ExternalURL
Name : EWS (Default Web Site)
InternalUrl : https://owa2010.company.com/EWS/exchange.asmx
ExternalUrl : https://owa2010.company.com/EWS/exchange.asmx
A record for autodiscover.company.com is created in EXTERNAL DNS and is pointing to a newly created Firewall rule on TMG, which has /autodiscover/* and /ews/* paths,
no authentication (it passes the authentication to Exchange 2010).
There is no SRV record in External DNS if that is important?
Lync2010 client connecting external is also having EWS shown as not deployed.
QUESTION:
QUESTION1:
I have a question regarding your statement: "Make sure you have configured the CAS Server Certificates including all SAN Names for all SMTP and SIP domains."
On TMG side I have two rules for LYNC and I want to clarify something about the certificates.
1 rule is for MEET NOW links and MOBILITY. This rule has /* path, no authentication and it leads to lyncFE ip address. This rule is for Lync reverse proxy which is
visible on external DNS as lyncproxy2010.company.com. Rule is using certificate with this SAN names:
DNS Name=lyncproxy2010.company.com
DNS Name=meet.company.com
DNS Name=lyncdiscover.company.com
DNS Name=autodiscover.company.com
DNS Name=dialin.domain.local
2nd rule on TMG is newly created Firewall rule
for solving EWS problem for Lync 2013. It has /autodiscover/* and /ews/* paths,no authentication (it passes the authentication to Exchange 2010).
This rule is pointing to public address: autodiscover.company.com and to public address owa2010.company.com. Rule is using the sam certificate as we use it in other firewall rules for Outlook web access, Outlook anywhere and ActiveSync. Certificate has this
SAN names:
DNS Name=owa2010.company.com
DNS Name=exchange.company.local
DNS Name=exchange.company.com
DNS Name=exchange
DNS Name=autodiscover.company.local
DNS Name=autodiscover.company.com
Ok, my newly rule does not have lyncproxy2010.company.com should it have? It also does
not have lyncdiscover.company.com should it have?
QUESTION2:
Is EWS internal/external url
case sensitive?
QUESTION3:
With creating a newly rule for LYNC where ews and autodiscover are not authenticated on TMG side I have also removed path's /EWS/* and /AUTODISCOVER/* on rules for Outlook anywhere on TMG. Now we have problem that free/busy status ain't working
external in Outlook clients.
Soo, fixing pop-up credentials for Lync 2013 is partly solved, because credential window ain't appearing anymore, but EWS is still shown as not deployed, on the other side we have "created" another problem with OOF Outlook external. Any hints?
with best regards,
bostjanc

Lync 2013 Setup and configure HELP

Hi,
i am having some trouble with my lync 2013 setup. i have configured lync to a stage were all users can connect to lync being inside or outside my network, we can send chats messages to each other but only if we are on the same LAN can we use the video, audio
and app sharing and desktop sharing. also i need to know how do i get my lync to communicate with other companies.
ok here is my setup.
ISP Cisco 877 router with 5 Static ips connects to my TMG 2010 (external Nic) internal nic connects to my LAN. all other devices plug into same LAN my TMG is forwarding ports to my exchange and helpdesk system. i have created all internal and external dns
entries. if i need an egde server were do i place this server.
network details below:
5 X ip: X.X.92.2
internal ip: X.X2.1 /24
please could someone assist me.
Kind Regards
Clemy
Cell : +27 72 864 0529

Hi There,
indeed your TMG Server should be equipped with 32 Network Interfaces as follows :
External
DMZ
Internal
the Lync Edge Server should be equipped with 2 Network Interfaces, usually the Edge server is placed inside a perimeter network which consists in 2 edge firewalls, one External and another one is Internal. please check the following link for detailed information
about the various Edge topology that are supported.
However you can always have a DMZ like your scenario which consists in a single firewall and connect the Edge server ends as follows
one interface to the TMG DMZ interface and one interface to the Internal Interface although this way you will be only protecting traffic from the DMZ interface.
kindly note that in case you chose to implement a secondary firewall take into consideration that the network relation from the the Edge internal interface to the internal LAN via the secondary firewall should be a route relation. since this is only the
supported scenario.
as for the reverse proxy you can still use the existing TMG as a reverse proxy since all published web components are actually located on the lync front-end server located on company LAN.
Regards,
Charbel Hanna
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread

Lync 2013, Diagnostic Report ID: 52161, What does it mean?

I am digging one report and found ID 52161, reason="Session was terminated as we are tearing down the conference due to failure on a different session". Can anyone explain it in more details? how it happens?
also does anyone know where I can found a list of all Lync diagnostic IDs explanations?

I am seeing this for some (many, but not all) Lync 2013 users when they try to use the "Call me at" feature for a meeting join. The other line/audio device joins the conference but the client that instructed it to do so drops off with that error
after 30 seconds.
The client sends a SIP 200 and then 30 seconds later it sends a BYE. We've tested with multiple platforms and it seems to be related to the user doing the inviting, not the IP or software.
Hugh
08/18/2014|16:00:55.396 1644:15D4 INFO :: Sending Packet - 10.99.11.214:5061 (From Local Address: 10.97.7.178:64018) 982 bytes:
08/18/2014|16:00:55.396 1644:15D4 INFO ::
BYE sip:[email protected];gruu;opaque=app:conf:focus:id:N17TPK12 SIP/2.0
Via: SIP/2.0/TLS 10.97.7.178:64018
Max-Forwards: 70
From: <sip:[email protected]>;tag=adffee5f34;epid=324e3d1d92
To: <sip:[email protected];gruu;opaque=app:conf:focus:id:N17TPK12>;tag=F15A0080
Call-ID: 24faac1bbbdd4c3c98a0373c78768b8e
CSeq: 4 BYE
Route: <sip:wat-lyncfe-02.xyzre.net:5061;transport=tls;opaque=state:T:F:Ci.R1c84f00;lr;ms-route-sig=cnSOrmdjudxW-GKPyGU8agEx4xj1BMYA-EFmqKEU_qL3no1o_fGXQ20gAA>
User-Agent: UCCAPI/15.0.4623.1000 OC/15.0.4623.1000 (Microsoft Lync)
ms-client-diagnostics: 52161;reason="Session was terminated as we are tearing down the conference due to failure on a different session"
Proxy-Authorization: TLS-DSK qop="auth", realm="SIP Communications Service", opaque="E6E79DA7", targetname="wat-lyncfe-02.xyzre.net", crand="06321e94", cnum="19", response="c5119a9e11076592b5e84881ee68dcf97657e4bd"
Content-Length: 0

Lync 2013 Client install failure

Hi
We're having trouble installing the Lync 2013 standalone client via SCCM on a couple of PCs. It is installing with no problem on most PCs.
However, on some PCs, it installs and when you launch it you get the message...
"Microsoft Lync has stopped working
A problem caused the program to stop working correctly. Please close the program."
The only option is close the program..
The event log shows an error..
Event ID 1000
"Faulting application name: lync.exe, version: 15.0.4569.1503, time stamp: 0x52b0af33
Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000
Exception code: 0xc0000005
Fault offset: 0x00000000
Faulting process id: 0x112c
Faulting application start time: 0x01cf9f6494efc8b5
Faulting application path: C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
Faulting module path: unknown"
We have completely uninstalled all traces of Office 2013 and trying reinstalling the software manually but the same thing happens. We even tried installing Lync as part of the Office 2013 install and the same thing happens (word etc does load ok, its
just Lync that fails)
Has anyone else had this happen? Any suggestions?

As this issue only happens on some PCs, so I think this problem is relate with PC.
Please check if there is Bluetooth utility installed on these PCs. If yes, try to remove it.
Update the drivers on these PCs to the latest version.
Lisa Zheng
TechNet Community Support

Lync 2013 do not show own photo

We have Lync 2013 and Exchange 2010. I imported photos to our AD. In Outlook 2010 we can see our own photo, but Lync 2013 client do not display user own photo, but when user1
write a message to user2, user2 receive message with user1 photo. This is a global problem, not for one user.
Can you help me in this case, because I didn't find any useful information?

Ben, thank you for quick response.
Our client policy:
Identity
DisplayPhoto
Global
AllPhotos
I imported only 96x96 pixels size photo. I also tried to import photo manually, but it not make any change in this problem.
Import-RecipientDataProperty -Identity "Name Lastname" -Picture -FileData ([Byte[]]$(Get-Content -Path "C:\user.jpg" -Encoding Byte -ReadCount 0))
If Lync 2013 user type his name in Lync search field and open his contact in Lync 2013 client, he able to see
his photo, company name, phone numbers and etc...
Lync 2013 clients and server have installed latest updates.

Outlook contact not added Email do not show all information i Lync 2013 Client

I have seen if no Email address is added into contact personen I only get emty Card of user i Lync 2013.
When I add Email adr. into contact person and wait a littel then user get all information right i Lync 2013 user Card.
IS this right or should it also showing user and all information from Outlook contact Card into lync 2013 client Card?

Lync aggregates contact data from Microsoft Exchange GAL, Outlook and Microsoft Lync Server.
So you can see information from outlook in Lync user card.
Lisa Zheng
TechNet Community Support

Lync 2013 with Skype

Hi,
I do have Lync 2013 Servers (on premise) and I do have connected with PIC, I can chat with GTalk users and MSN users. I can also chat with new Skype users who have new Skype client application and which were connected their Skype account with Microsoft accounts.
However, when will Lync 2013 users will be able to add ALL current Skype users (including those who aren't connected to their Microsoft Account). Also when will this Skype users be able to find & add all Lync users ?
If never, what will be with those who never connect their Skype account with Microsoft Account.
Are there any rumors or official news regarding to this ?
-- Hrvoje Kusulja

I didn’t see such news.
In theory, you can’t search all the Skype users and Lync users.
In the corporate network, you can access the GAL, then you can search all the Lync enabled user. But as an external user, you can’t access the GAL. So you need to add the contact by SIP address.
If the receiver doesn't accept your invitation, you won't be able to chat with this user.
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Lync 2010 to Lync 2013 migration - Dialin conferencing

While migrating from Lync 2010 to Lync 2013, i have stopped all services on the Lync 2010 servers to make sure all is okay and everything is working fine with Lync 2013.
Nevertheless, when someone on Lync 2013 schedule a meeting, and someone dial one of the PSTN Dialin conference number and enter the conference ID, this scenario is not working.
If i start the Lync 2010 front end services, then the previous scenario works.
So i did something else. I have scheduled a meeting and i change the meeting options to get a new conference ID. this makes the conference work over dial in pst number while Lync 2010 services are down.
This means:
- When someone (Lync 2013 user) schedule a meeting, the default conference ID that is generated, requires the existence of Lync 2010 services for a PSTN Dial in user to connect
-When someone (Lync 2013 user) schedule a meeting and change the meeting options to get a new conference ID, then the PSTN Dial in user can connect even if all Lync 2010 services are down.
Any clue?
ammarhasayen

i have found it. moving the conference directories from Lync 2010 to Lync 2013 solves the whole thing.
ammarhasayen

Lync 2013 custom SSRS reports from CDR

Trying to replicate canned Lync 2013 User Activity Report, but with more filtering capability, using SSRS. Necessary to do this way because we're adding details like user names, departments and locations from our Active directory.
Have been unable to ever find support on WHAT the query or stored proc IS behind the UA report. If I have that code I can incorporate that with our data.
Any help appreciated!
Jim Nelson
James Nelson

The CDR schema can be found here, which will be helpful for creating your reports:
http://technet.microsoft.com/en-us/library/gg398570.aspx
Most queries start from the SessionDetails Table:
http://technet.microsoft.com/en-us/library/gg398589.aspx
For hacking up existing SSRS reports to see what procedure or view they call, you'll have better luck asking in the SQL forums.
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications

EWS trouble on some Lync 2013 users

Similar Messages

Maybe you are looking for