Forced to restart Edge Server for new Users

Our current architecture is fairly simple and has a Front-End, Edge, and Office Web Apps Server. When we add a user, we are unable to sign-in with that new user until we restart the Edge Server.
We have tried to run "Update-CsUserDatabase" from front-end as well as "Invoke-CSManagementStoreReplication" to force replication. We see when we run "Get-CsManagementStoreReplicationStatus" that all is up to date and
is showing "True" and "True".
We are also able to see the accounts when running Cs-GetUser on both servers. However, we are unable to login with the new users we added until after we reboot the Edge Server.
We have checked logs on the Edge server and we don't see any errrors. On the Front-End server, the only error we see is in regards to Source "LS Data MCU" Event ID 41029.
It just seems strange that the Replication Store appears updated but people can't login until after reboot of edge server.
If anyone has any information about this, please respond.
NH

Hi,
Did the issue happen if the Lync users login external the corporation or even happen when the Lync users login internal the corporation?
Please double check WAC configuration (including Server FQDN spelling, certificate and so on).
More details:
http://lyncuc.blogspot.com/2014/06/ls-data-mcu-event-id-41029.html
Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found
there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Similar Messages

GPO not working for new Users (Background)

Terminal Server 2012 in a hosted environment
I've set the below policy to set a default background wich can be changed by the users after this.
The target is an networkdrive. (The Reason behind this is that we have multiple resellers that all have the same networkdrive but pointing to a different store) Lets just say for this example that is P:/Background/ResellerBackground.jpg
The policy is Linked to the Resellers OU.
This works perfectly for all the existing users.
For new users this is not working at all. It does run the policy but it create the profile after running the policies.
So the above setting gets overruled by the default windows server 2012 background. The RunOnce atribute is set now, so it will not load it again.
I have read a lot of different sollutions so far, but none are working in this environment. (From changing the default Hive to changing the default picture etc)
One sollution came close, but not working perfectly either, this is removing the RunOnce atribute from the register, and letting the new users log in again. You do not wanna let new users login twice.
Before Windows 7/8/2012, in XP it just copied the default user and then the policies ran. So here the problem does not exist. Now it makes the profile after running the policies.
Anyone having an idea to resolve this issue?

Hi,
Before going further, what’s the value in the wallpaper registry entry
value data for new users?
>>One sollution came close, but not working perfectly either, this is removing the RunOnce atribute from the register, and letting the new users log in again. You
do not wanna let new users login twice.
If we choose this solution, we can try running cmd command
gpupdate/force to see whether it can work.
Another workaround is we can do it from scratch. We can create a new GPO to deploy wallpaper for these new users. The steps are the same as previous ones, just using
Security Filtering to apply this new GPO to new users, and unlinking and deleting the GPO after the policy getting updated.
Best regards,
Frank Shen

Edge server for Lync 2013

Hi,
I have a lync server 2013 in my enviroment. Now users are accessing lync 2013 internally. i want to allow external users to access lync services like web scheduler etc. how we can configure edge server for lync 2013.
Thanks

Hi,
To install Edge Server follow this step by step guide
http://social.technet.microsoft.com/wiki/contents/articles/16931.installing-lync-2013-edge-server.aspx
http://www.orcsweb.com/blog/cory-granata/installing-lync-2013-edge-server/
Whenever you see a helpful reply, click on Vote As Helpful & click on Mark As Answer if a post answers your question.

Is an iBooks Author tutorial available for new users?

Is an iBooks Author tutorial available for new users?

You can also try this site for video training on iBA. It's around $25/month for unlimted viewing and may be easier for some people than reading a manual:
http://www.lynda.com/iBooks-tutorials/iBooks-Author-Essential-Training/101460-2. html

How do i to totally reset iPad for new users?

How do i to totally reset iPad for new users?

Welcome to the Apple Support Communities
Open Settings > General > Reset > Erase All Content and Settings. After erasing your device, turn it off holding Sleep button

Lync edge server for site with 2500 users

Dear All,
I have a question with regards to the implementation of lync edge server deployment.
One of our client having lync deployment with 4000 users in a central site with 3 FE EE and edge pool with 2 Edge servers, there are planning for a new site with 2500 users.
what will be the best method for the site implementation , shall we deploy a SE Fe server and all the external communication through the Central site Edge server?
or is it required to have a separate pool for site?
please help me

Agree with the others. So, there's two questions, "what will be the best method for the site implementation?" and "is it required to have a separate pool for site?".
The best method I'd suggest is use Enterprise Edition Lync so you can perform pool pairing for resiliency, and have a local edge pool as the others suggested. You have enough users to support this, and with growth you might want to be able to scale
up anyway.
Is it required? Not at all. You can send them all through the central site edge server, it's possible and fully supported. It's up to you, but I'd suggest the separate pool.
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications

Full true Administrator Privileges and rights for New User?

I am wondering how to grant full administrator privileges to a newly created user?
Here is the environment:
Windows 2012 Server 64bit
Not part of a domain <WORKGROUP>
Here is the problem:
I created a new user we will call them "SecondaryAdmin", and made them part of "Administrators" group as well as the "Remote Desktop Users" group.
I login through an RDP session as "SecondaryAdmin", I go to a command prompt, and I run IISRESET and it tells me:
"Access denied, you must be an administrator of the remote computer to use this command. Either have your account added to the administrator local group of the remote computer or to the domain administrator global group."
Additionally, I have IE Enhanced Security turned off, but if I open Internet Explorer while logged in as "SecondaryAdmin" it still displays the IE Enhanced Security warnings.
Also, if I try to copy a file to the root "C:\", it gives me "Access denied error" forcing me to continue with elevated administrator privileges.
If I run the command prompt as "administrator" I can do an IISRESET without error.
If I run Internet Explorer as "administrator" I do not get the warnings.
If I run windows explorer as "administrator" I do not get the access denied.
However, I WOULD NOT trust this "SecondaryAdmin" account to install ANYTHING. Even if you ran the install executable as "admin", often times these install files will fire off secondary scripts that wont be fired off as "admin",
which may lead to incomplete or corrupt installs.
This changed from Windows 2008 R2 to Windows 2012.... If I do the same exact thing in Windows 2008, I am able to do all the above things without prompt or error.
So how can I give a new user true, full, elevated, admin privileges without having to run everything as administrator? Some obscure setting in GPO? Some registry setting (already tried LocalAccountTokenFilterPolicy)?
What I have tried:
UAC is OFF
Firewall is OFF
IE Enhanced Security is OFF
Remote Management/Desktop Enabled
User part of Administrators Group and Remote Desktop Group
Used "netplwiz" to verify user is Administrator
Please help!

Hi Chris,
I appreciate your answers, however, this is not what I am looking for.
I want the "SecondaryAdmin" user, who is part of the Local Admininstrator group, to have full Admin access.
I DO NOT want them to have to do anything special, or have any user intervention.
NO yes/no dialog boxes
NO clicking "Run As Admininstrator"
NO changing shortcuts or executable file properties to always "Run as Admin"
I simply want the "SecondaryAdmin" account, which is part of the "Administrators" group, to have the same access and run the same seamless way it did in 2008 R2, with no user intervention required.
This is what I am looking for.
Kind Regards,
James

Created mailbox for new user in Exchange 2010, user not visible in AD.

Hi everyone!
This morning I created a mailbox for a new user on my Exchange 2010 box.
Everything works fantastically but I am unable to view the new user in AD except by searching. If I run a search the results say the user exists in my Users container, and I can view the properties of the user account from the search results, but I
am unable to actually see the user profile object in the Users container.
I notice in EMC that the mailbox has a user icon on the mailbox icon instead of the regular standard icon - I'm not sure what this implies.
Can anyone offer some advice as to why this happens and how to resolve it?
Thanks!

Hi,
AD objects store in the Domain partition Database.
Its replication Scope is :Domain Wide
Its replication model is: Multi Master
There are two possible cause.
1. AD replication latency if you have several DCs.
You could wait for AD replication or force replication, Click
refresh on ADUC.
2. You create the new user
in other OU, not Users.
You could run this command to get
the user’s DistingushedName attribution.
Get-mailbox –identity
[email protected] |fl
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Calendar Free/Busy permissions being ignored for users migrated from Exchange 2003, fine for new users created on Exchange 2010

I have uncovered a situation where it seems the free/busy permissions are being ignored for users that were migrated from Exchange 2003 to Exchange 2010.
I have the default permissions set to only show Free/Busy Time, not Details. However if I look at the calendar for a users who was migrated from the old Exchange 2003 server, I can see details. If I look
at a newer user who was added directly to the Exchange 2010 server, I (correctly) only see the times and "Free" or "Busy", not the specific details.
I verified the permissions on the migrated mailboxes many different ways (Exfolders, cmdlets, etc) and all signs point to only allow showing Free/Busy Times, but alas, I can still see the Details as well.
My users are using Outlook 2010.

Hi,
Does this issue occur on Outlook only or both Outlook and OWA?
Since you have double checked the permissions via multiple methods, it seems there is nothing problem on permission. Please make sure the migration from Exchange 2003 server completed successfully.
If in OWA everything goes well (cannot see details), it should be an issue on the Outlook client side.
I suggest run Outlook under safe mode to avoid some AVs and add-ins.
I suggest re-create profile to refresh the caches.
Thanks
Mavis
Mavis Huang
TechNet Community Support

Intermittent OWA authtication issue for new users on Exchange 2007

Hi
We are experiencing a strange issue with OWA authentication and its happening with new users only including me. We are a small organization with approx. 70 users. Issue is with
new user accounts only.
Access to OWA stops working from any machine for the new users also they get authentication error on their phones. I have checked permissions on Virtual Directory on exchange server,
all seems to be in place. I have checked event viewer but it doesn't have any event for auth. failure.
IIS logs have the following Message,
2014-02-05 09:37:28 W3SVC1 (EXCHANGE SERVER IP) GET /owa/ - 443 myusername 77.88.97.134 Mozilla/5.0+(Windows+NT+6.3;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko
401 1 1326
Server details
Server 2003 Ent. x64 R2
Exchange Server 2007 Version: 08.03.0342.000
IIS 6.0
Rebooting the exchange server resolves the issue sometime for 2 days sometime for 3-4 weeks.
Please advise.
Best Regards
Prabhash

Hi,
According to your description, new users cannot login OWA .
And to narrow down the cause, I recommend the following troubleshooting:
1. Check if the option"User must change password on next login" has been selected for the new users.
2. Check if the new users can login Outlook when the issue happens.
3. Check if it’s configured to use Integrated Windows authentication for OWA web site:
http://support.microsoft.com/kb/871179
If you have any question, please feel free to let me know.
Thanks,
Angela Shi
TechNet Community Support

Outlook Anywhere Trouble for new users

Hello,
My client had Exchange 2010 SP3, lastest rollup. He has Outlook Anywhere enabled and all of his users, except a new one he created a few days ago, have no problem accessing their mailboxes.
This new user experiences a problem, once she goes home and tries to open her Outlook 2010, a User\Password prompt appears which does not go away even when you get it right. Eventually after 3 attempts usually, it goes away but outlook opens up disconnected.
There is this Error event - MSExchangeAL id 8364, on the exchange server, and it does correspond to our problem. although, no valid solution is given for it, wherever i've searched.
We've tried Changing authentication methods from Basic to NTLM to Negotiate and to Basic back again, tried disabling the "Encrypt data between Outlook and Exchange", We've tries online mode, it does not even open outlook. it gives us an error regarding
a bad ost file. If outlook does allow the user in, it's only in cached mode and it immeditaly changes status from "Trying to connect..." to "Disconnected". We've checked the checkbox of "On slow connections use....". OWA Works.
Any insight would be greatly appreciated. Thank you.

Hi,
According to your description, only one your user cannot use Outlook Anywhere to connect to the server. If I misunderstand your meaning, please feel free to let me know.
If yes, I recommend you firstly troubleshoot if the issue is related to the certain Outlook client:
Recreate a new profile for the problematic users or change another computer to reconfigure the account.
Additionally, you can also use ExRCA to check the Outlook Anywhere connectivity:
https://testconnectivity.microsoft.com/
If you have any question, please feel free to let me know.
Thanks,
Angela Shi
TechNet Community Support

Portable Home Directory (PHD) not being created for new users

Creating users in the Workgroup Manager also created their home directories at the time I created it when we were using Leopard 10.5 server.
But now that it is upgraded to 10.6 server, it doesn't do anything when I create a new user and tell it to "Create Home Now".
Any idea how to fix this?

Assuming that the server is properly configured (most importantly DNS) try running sudo createhomedir -a
and see what that does. In my experience, clicking the create home now button doesn't always work.
See here for more info on this command.
http://support.apple.com/kb/TA21050?viewlocale=en_US
Note that this has worked for me on 10.3 to 10.5 Server - I've not tried it with 10.6.
Jeff

OBIA 7.9.6.4 security for new user

Hi,
I have setup OBIA 7.9.6.4 environement on Linux platform and configured 4 modules financials, Supply chain & Order management, Procurements & Spend and Project.
Then I have created a new user in weblogic LDAP server and assigned to BIConsumers Group, but none of the report are displaying results. so that I can share this user log in details with other user so that they can only open report and should not be able to make any changes to them.
Please advice if anything additional required to done apart steps.
Thanks
Lalchand

Hi,
BI Platform Consumer was already included in both place access to Dashboards and Answers, I have also included the BI Platform Author Role, but still no luck. I am getting below mentioned error
Error Codes: YQCO4T56:OPR4ONWY:U9IM8TAC:OI2DL65P
Odbc driver returned an error (SQLExecDirectW).
State: HY000. Code: 10058. [NQODBC] [SQL_STATE: HY000] [nQSError: 10058] A general error has occurred. [nQSError: 43113] Message returned from OBIS. [nQSError: 27005] Unresolved column: "Fact - Inventory Transactions"."Actual Issue Quantity".Please have your System Administrator look at the log for more details on this error. (HY000)
SQL Issued: {call NQSGetLevelDrillability('SELECT Product."Product Type Description" saw_0, "Movement Type"."Movement Type Description" saw_1, "Fact - Inventory Transactions"."Actual Issue Quantity" saw_2, "Fact - Inventory Transactions"."Actual Receipt Quantity" saw_3 FROM "Inventory - Transactions" WHERE ((TOPN("Fact - Inventory Transactions"."Actual Issue Quantity",5) <= 5) OR (TOPN("Fact - Inventory Transactions"."Actual Receipt Quantity",5) <= 5)) AND ("Time"."Year" = ''2013'')')}
Thanks
Lalchand

How to Define Workbook / Business Ares Security Correctly for new Users

Hi All,
Please could you help me understand the Security Model for Workbooks and business Areas as I believe I am very close to understanding it, but missing something important.
Background Information:
We are using the predefined Oracle Business Areas (Payables, Receivables, Purchasing & General Ledger) to build our reports on. These are the steps I am taking to try and assign a new user & responsibility access to the existing report.
1. I create the Report in Discoverer Desktop under the General Ledger Responsibility logged in as myself assume report name = Report_1.
2. I create a new Responsibility in Oracle Apps called Discoverer Resource Coordinators.
3. I create a new User in Oracle Apps called Joe Bloggs and assign the responsibility Discoverer Resource Coordinators to the Joe.
4. Logged in as myself in Discoverer Desktop, Responsibility General Ledger I Share the Report (Report_1) to the new Responsibility I just created Discoverer Resource Coordinators.
5. In Discoverer Administration, Security, I assign the new Responsibility Discoverer Resource Coordinators to the predefined Oracle Business Areas (Payables, Receivables, Purchasing & General Ledger).
6. In Discoverer Administration I set privileges so that the Responsibility Discoverer Resource Coordinators can do all tasks, query data, administer. .etc. etc..
7. I therefore believe everything has been done and attempt to Login and run the report under Joe Bloggs, but am unable to retrieve any data.
Help what am I missing!
Thanks,
Lance
Message was edited by:
Lance

Dear All,
This has now been adjusted according to your recommendations but to no avail.
Myself and Lance have ensured that this new responsibility has unlimited access to all the existing Business areas to eliminate joins within folders not being recognised, we have also ensured that the workbooks that have been created are shared with the correct responsibility.
I have thoroughly tested this set up by logging in as this new responsibility within Disco. Client to try and retrieve data in a new Workbook, but even for the simplest of queries this fails.
It seems that there may be a problem with the Responsibility linking to the EUL, could this be due to the new responsibility being created after the Current EUL was set up?
Does anyone have any information or knowledge where this could happen?
Regards
Si

How do I set access to the same network share on a Windows server for multiple users on an iMac (school set-up) in Lion 10.7.3?

We've got them authenticating/binding with AD (after hours of troubleshooting to get working), and their Home drive on the Windows 2003 server loads in the dock, but they also want to be able to load the same network shares on the server e.g. "Students$" for every student that logs onto the iMac. I realise without Lion server we can't control it by group, but if we could at least set it up consistently for the students that would be a great start.
Thanks.

When you install you get the opportunity to install it for "All Users".
It sounds like you have a demo version on your Mac however, you need to delete it:
http://www.freeforum101.com/iworktipsntrick/viewtopic.php?t=105&mforum=iworktips ntrick
Peter

Forced to restart Edge Server for new Users

Similar Messages

Maybe you are looking for