Lync 2013 disabled user can still login.

Ok. so we have this weird behavior and it's been driving us crazy for over a week. We have a lync 2013 deployment on a forest with several child domains.<o:p></o:p>
In the middle of the deployment, we noticed that our changes to the user characteristics were not being updated. Eg: we enable or disable
enterprise voice, no changes. We change the sip URI, log out, login, nothing, no changes. And we noticed that if we disable the user from Lync server (from the lync controlpanel), the user can still login. We assumed some lag on AD replication, but no, a user
can still login after a week!<o:p></o:p>
The deployment is a standard Lync 2013, single FE, with a single Edge server. We have enabled Enterprise voice, changes to the enterprise voice routes are
working, if we enable or disable a route we can see it on the client, but changes on the dialplan are not reflected.<o:p></o:p>
I can’t find any reference to this behavior. I know if I disable a user from the AD he can still signing into Lync, but this is different, we are disabling
the user from Lync server. We even removed the user completely from Lync and he can still use it as normal.<o:p></o:p>
We checked the user using adsiedit and the msrtcsip-userenabled is set to false, we even voided the certificate via lync console. Still able to use it.
Suggestions?
Thanks in advance.
Fabio Ricci.

Hi,
Please check if there is any error message on FE Server when the issue happen.
It seems to be the issue of CMS replication.
Please check CMS replication status by running Get-CsManagementStoreReplicationStatus.
If CMS replication not update to the latest version, run Invoke-CsManagementStoreReplication.
If the issue persists, please check Lync Server update, make sure Lync Server update to the latest version, and then test again.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

Similar Messages

Error during the migration of Lync 2013 onpremise user to Office 365 Lync

Hi,
I am trying to migrate a Lync 2013 onpremise user to Office 365 Lync in a Hybrid environment.
I am connecting to the Lync server from my machine with the following commands
$lyncOptions = New-PSSessionOption -SkipRevocationCheck -SkipCACheck -SkipCNCheck
$lync = New-PSSession -ConnectionUri https://lyncserver/ocspowershell -SessionOption $lyncOptions -Authentication NegotiateWithImplicitCredential
Import-PSSession $lync
In the next step I am trying to migrate the user to the Office 365 Lync:
Move-CsUser -Identity "username" -Target 'sipfed.online.lync.com' -HostedMigrationOverrideUrl 'https://admin1e.online.lync.com/HostedMigration/hostedmigrationservice.svc'
After that I get a warning message due to to migration to a previous version which I accept.
WARNING: Moving a user from the current version to an earlier version (or to a service version) can cause data loss.
Confirm
Move-CsUser
[Y] Yes [A] Yes to All [N] No [L] No to All [?] Help (default is "Y"): y
Then I am getting the following error message:
Can not load Live Id module. Make sure correct version of Live Id Sign-in assistant is installed.
    + CategoryInfo          : NotSpecified: (:) [Move-CsUser], CommonAuthException
    + FullyQualifiedErrorId : Microsoft.Rtc.Admin.Authentication.CommonAuthException,Microsoft.Rtc.Management.AD.Cmdle
   ts.MoveOcsUserCmdlet
    + PSComputerName        : lyncserver
Tried to Google it but found nothing.
As far as I can see it is complaining about the Live ID Sign-in assistant, which is installed (the 64bit version) on my computer but not on the remote server. Does it need to be installed on the server as well?
Thanks for the answers in advance.
Regards,
Akos
Akos_DB

This error related to reporting services, you need to verify that reporting services is installed on these instances.
Secondly, you didn't need to create this instance manually then setup monitoring role. delete this instance from shared storage and try again to setup rule using different instance name and it will create automatic on shared storage.
You can also refer below link
http://windowspbx.blogspot.com/2012/07/aaa-donotpost-install-lync-standard.html
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"

Users can't login to Groupwise after export

Hi All
We have a two-node cluster running GW7.01 on Netware 6.5 SP7. As part of our disaster recovery test we've done the following:
1. Installed netware 6.5 sp7 onto a new server in its own tree.
2. Installed GW7 on this server, with an identical groupwise system i.e same domain name, etc (only difference is server name, IP, and tree name).
3. We then exported the NDS/GW objects from the current production tree using the GWport32 utility into the new tree on the new server.
4. We've restored from a backup tape the PO database file and the accompanying files, the domain database file, and all the files and sundirectories from the ofuser, ofmsg, and offiles directories onto their corresponding locations on the new server.
5. After getting C00F and D019 errors, we've tried to rebuild the ngwguard.db and the PO by running a standalone GWCheck.
Our problem is that I can login to the new server (edirectory tree) as any user albeit without any password but unable to login to groupwise. I've set and reset passwords in ConsoleOne but I still can't login to groupwise.
We would be very grateful if anyone could tell us what else we need to do.
We're hoping to achieve a situation where in an extreme disaster, we are able to restore mail from tape backups so that users can still logon to this new server and have full access to their mailboxes with ease.
regards
AD

awuku wrote:
> Hi All
> We have a two-node cluster running GW7.01 on Netware 6.5 SP7. As part
> of our disaster recovery test we've done the following:
>
> 1. Installed netware 6.5 sp7 onto a new server in its own tree.
>
> 2. Installed GW7 on this server, with an identical groupwise system i.e
> same domain name, etc (only difference is server name, IP, and tree
> name).
>
> 3. We then exported the NDS/GW objects from the current production tree
> using the GWport32 utility into the new tree on the new server.
>
> 4. We've restored from a backup tape the PO database file and the
> accompanying files, the domain database file, and all the files and
> sundirectories from the ofuser, ofmsg, and offiles directories onto
> their corresponding locations on the new server.
>
> 5. After getting C00F and D019 errors, we've tried to rebuild the
> ngwguard.db and the PO by running a standalone GWCheck.
>
> Our problem is that I can login to the new server (edirectory tree) as
> any user albeit without any password but unable to login to groupwise.
> I've set and reset passwords in ConsoleOne but I still can't login to
> groupwise.
>
> We would be very grateful if anyone could tell us what else we need to
> do.
>
> We're hoping to achieve a situation where in an extreme disaster, we
> are able to restore mail from tape backups so that users can still logon
> to this new server and have full access to their mailboxes with ease.
>
> regards
> AD
>
>
I would NEVER have use GWPORT32. Why did you?
1. You have to restore eDirectory in a different way.
2. If tree is still intact reimporting is bad
3. IF tree is not intact, you still have to restore eDirectory differently.

The same user can only login once

Hello,
I have a problem with my system. I made a system where you must login.
I use the following code:
boolean login = false;
String username= request.getParameter("username");
String password= request.getParameter("password");
User user= Usermutations.makeviaUsername(username);
if (user.getPassword().equals(password) && !password.equals("")) login= true;
if (login) ReqD = getServletContext().getRequestDispatcher("/Overview.jsp");
else ReqD = getServletContext().getRequestDispatcher("/False.jsp");
request.getSession().setAttribute("user",user);
request.getSession().setAttribute("username",username);
request.getSession().setAttribute("password",password);
if (ReqD != null) ReqD.forward(request,response);
//Clean up resources
public void destroy()
Now I want that the same user can only login once. So when a user login with his username and password, no one else can login with that user name and password.
I don't wan't to put the username in the database and then validate if the user is already logged in, because then the user must logout and not close the webbrowser else the user stays in the system.
Does anyone knows a solution top this problem.
Thanks in advance,
Henk

So I wan't the database and when the user is logged in
the name is set in the database. But when the user
clicks on the X (close button in the browser his
username must be deleted from the database)You can't tell when the user does that (or perhaps you can sometimes, with difficulty). But even if you could it doesn't solve your problem. Many people keep their browsers open all day, and -- you may find this shocking -- they go to sites other than yours.
So basically, if you don't provide them with a logout button you can't tell when they "leave" your site. And even if you do provide them with a logout button, they won't necessarily bother to use it. So you're left with waiting until the session expires, and then logging them out. This also means that if they come back to your site while the session is still active, then they are still logged in. This is not an error and you should not treat it as one.
PC²

A particular network user can't login to a mac in a classrom but other network users can. Then the network user can login to other identical macs in same classroom. Anyone seen this before?

A particular network user can't login to a mac in a classrom but other network users can. Then the network user can login to other identical macs in same classroom. Anyone seen this before? It has happen twice. Two different teachers in two different classrooms entering the correct user name and passwords and computer won't allow them to login. Then they try in different computers in same classroom and have no problem login.

Yes. I can login with a test user. And any other network user can login as well to this particular mac. Actually the mac has bootcamp and boots into either mac or windows. The same user entering the same login username and password can login into the windows side, but not the mac side.
I had this same issue last semester in another classroom, another mac and a different teacher. This summer I reformatted and imaged that mac and I asked that teacher to login today to that reimagened mac and she had no problem today doing so.

Lock "Print & Fax" Sys Preference user can still add printers, why?

lock "Print & Fax" Sys Preference user can still add printers, why?

I should add that, I click the lock icon and it shows locked, but the + sign to add a printer is not greyed out and still allows printer drivers to be installed. It then allows the printer driver to be deleted. I have tried quiting System Preferences and rebooting the system and still have the same results.
Pat

Lync 2013 - Hide users not enabled for Lync from Lync AB

Ok - so here is the environment
Lync 2010 - preparing to upgrade to 2013
Exchange hosted on O365 only, so no exchange schema in the local domain.
There are tons of service accounts and other non-user accounts, as well as disabled users for previous employees that still show up in the Lync AB. I understand how in 2010 to add an attribute and modify the AB behavior to hide users like this, but
I am concerned that when we upgrade to 2013 in the near future, I won't be able to hide these users.
Is there a method to modify the behavior of the Lync 2013 AB service to not grab and index users?

You'd want to use ABSConfig for this. Is that what's in place now? Most of the documentation is around Lync 2010 for this, but it is included in the 2013 resrouce kit and should work with 2013.
http://www.justin-morris.net/how-to-hide-users-from-the-lync-address-book/
http://www.microsoft.com/en-us/download/details.aspx?id=36821
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications
This forum post is based upon my personal experience and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Lync 2013 android client fails to login bug when ISP overrides DNS

Hello all,
I've noticed an issue occurring in the latest Android client (as of 3/9/2015) with internet networks where the provider resolves all DNS queries to an IP address (e.g. T-Mobile, Cox Cable, and lots of others).
Essentially, sometimes I have noticed my android client stuck on "Signing in". The diagnostic logs show that the client is attempting to resolve http://lyncdiscover.contoso.com (which is not resolvable
externally), but T-Mobile is sending it into a search engine. The app continues to try to connect despite not realizing that it really did not resolve properly. See below logs.
<html><head><meta http-equiv="refresh" content="0;url=http://lookup.t-mobile.com/index.php?origURL=http://lyncdiscoverinternal.contoso.com/"/></head><body><script type="text/javascript">window.location="http://lookup.t-mobile.com/index.php?origURL="+escape(window.location)+"&r="+escape(document.referrer);</script></body></html>
</ReceivedResponse>
Mar 9, 2015 8:26:50 AM ERROR LYNC: ERROR TRANSPORT /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/transport/common/private/TransportUtilityFunctions.cpp/1874:Accept-types (application/vnd.microsoft.rtc.autodiscover+xml;v=1) not found in Content-Type response from server (text/html). Not decoding.
Mar 9, 2015 8:26:50 AM INFO LYNC: INFO TRANSPORT /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/transport/requestprocessor/private/CHttpRequestProcessor.cpp/266:Sending event to main thread for request(0x9a306048)
Mar 9, 2015 8:26:50 AM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/private/CTransportRequestRetrialQueue.cpp/822:Req. completed, Stopping timer.
Mar 9, 2015 8:26:50 AM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/private/CUrlRedirectAndTrustResolver.cpp/610:UrlRedirectAndTrustResolver complete with url = http://lyncdiscoverinternal.contoso.com/, Hops = 1, status = E_ResponseUnknown (E2-1-5)
Mar 9, 2015 8:26:50 AM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/private/CTransportRequestRetrialQueue.cpp/725:Response received for req. UrlTrustResolver(0x9a306048): E_ResponseUnknown (E2-1-5) (RemoteNetworkPermanentError); Done with req.; Stopping resend timer
Mar 9, 2015 8:26:50 AM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/private/CUcwaAutoDiscoveryGetUserUrlOperation.cpp/393:CUcwaAutoDiscoverGetUserUrlOperation::onEvent received. Status = E_ResponseUnknown (E2-1-5), url = http://lyncdiscoverinternal.contoso.com/
Mar 9, 2015 8:26:50 AM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/private/CUcwaAutoDiscoveryGetUserUrlOperation.cpp/224:UcwaAutoDiscoveryGetUserUrlOperation completed with url = http://lyncdiscoverinternal.contoso.com/?sipuri=sip:[email protected], userUrl = , status = E_ResponseUnknown (E2-1-5)
Mar 9, 2015 8:26:50 AM DEBUG SigningInActivity: onStop()
Mar 9, 2015 8:26:50 AM DEBUG SigninActivity: onStop()
Mar 9, 2015 8:27:20 AM DEBUG HubActivity: onPause()
Mar 9, 2015 8:27:20 AM DEBUG MyStatusFragment: onPause()
Mar 9, 2015 8:27:20 AM DEBUG ContactsFragment: onPause()
Mar 9, 2015 8:27:20 AM DEBUG HubActivity: onStop()
Mar 9, 2015 8:27:20 AM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/objectmodel/private/CApplication.cpp/944:CApplication::serialize() called
Mar 9, 2015 8:27:20 AM VERBOSE LYNC: VERBOSE APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/privateandroid/CCredentialStore.cpp/90:storing credentials for service:0
Mar 9, 2015 8:27:20 AM VERBOSE LYNC: VERBOSE APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/privateandroid/CCredentialStore.cpp/90:storing credentials for service:1
Mar 9, 2015 8:27:20 AM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/objectmodel/private/CBasePersistableEntity.cpp/179:Storing 1 out-of-sync Object Models took 32ms
Mar 9, 2015 8:27:20 AM INFO LYNC: INFO UTILITIES /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/platform/persistentstorage/private/CBasePersistableComponent.cpp/245:Storing 3 out-of-sync components took 1ms
Mar 9, 2015 8:27:20 AM INFO PreferencesManager: commit is called on
Mar 9, 2015 8:27:20 AM DEBUG MyStatusFragment: onStop()
Mar 9, 2015 8:27:20 AM DEBUG ContactsFragment: onStop()
Mar 9, 2015 8:27:27 AM ERROR HttpConnection: org.apache.http.conn.HttpHostConnectException: Connection to https://lyncdiscoverinternal.contoso.com refused
at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:183)
at org.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:164)
at org.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:119)
at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:360)
at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:555)
at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:487)
at com.microsoft.office.lync.platform.http.HttpEngine.execute(HttpEngine.java:502)
at com.microsoft.office.lync.platform.http.HttpConnection$1.run(HttpConnection.java:219)
at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:422)
at java.util.concurrent.FutureTask.run(FutureTask.java:237)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1112)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:587)
at java.lang.Thread.run(Thread.java:818)
Caused by: java.net.ConnectException: failed to connect to /198.105.244.104 (port 443) after 180000ms: isConnected failed: ECONNREFUSED (Connection refused)
at libcore.io.IoBridge.isConnected(IoBridge.java:238)
at libcore.io.IoBridge.connectErrno(IoBridge.java:171)
at libcore.io.IoBridge.connect(IoBridge.java:122)
at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:183)
at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:456)
at java.net.Socket.connect(Socket.java:882)
at org.apache.http.conn.scheme.PlainSocketFactory.connectSocket(PlainSocketFactory.java:119)
at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:144)
... 12 more
Caused by: android.system.ErrnoException: isConnected failed: ECONNREFUSED (Connection refused)
at libcore.io.IoBridge.isConnected(IoBridge.java:223)
... 19 more
Since DNS overrides by ISPs are a common occurance, I believe the app should properly handle this situation. I installed an app to override my DNS and use Google's DNS servers, and the client connects fine.

Hi,
Did you login Lync 2013 mobile client internal or external the company?
Did the issue also happen for IOS/Windows Phones or just happen for Android Phones?
Please try to check if the issue only happen for your mobile Lync client or also happen for other Android mobile clients.
If the issue only happen for your Android mobile, please try to uninstall Lync client and install the latest version from Android Market and test the issue again.
If the issue happen for multiple mobile clients, please double check the Reverse Proxy settings, if you use IIS ARR for Reverse Proxy, you can troubleshooting with the help of the link below:
http://blogs.technet.com/b/nexthop/archive/2013/02/19/using-iis-arr-as-a-reverse-proxy-for-lync-server-2013.aspx
Best Regards,
Eason Huang
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected].
Eason Huang
TechNet Community Support
Ok, I figured out that I had a partial misconfiguration, but the existing client behavior still leads to long delays on a variety of networks. I had the reverse proxy forwarding into port 80 instead of 8080, which seemingly caused problems
during the second autodiscovery phase after the first timed out. I have since confirmed that it's not just T-Mobile, but any such provider (e.g. Cox Cable, see below) that resolves all DNS entries.
Essentially, the following is happening:
1) Client attempts to resolve lyncdiscoverinternal first.
2) DNS record resolves to ISP's website, because they resolve everything and will return their own page if the entry really doesn't exist.
3) Lync client continues to try to connect to the ISP's address, and sits for at least a minute until it eventually falls to the lyncdiscover record.
From the below log entries, you can see that the login process is delayed a full minute due to the client being stuck on the lyncdiscoverinternal record! Again, this does not occur on ISPs that do not catch all DNS resolution
attempts, regardless of validity.
Mar 9, 2015 8:10:04 PM INFO HttpConnection: originalurl is
https://lyncdiscoverinternal.contoso.com/?sipuri=sip:[email protected] method Get
Mar 9, 2015 8:10:04 PM INFO HttpConnection: decodedurl is
https://lyncdiscoverinternal.contoso.com/?sipuri=sip:[email protected]
Mar 9, 2015 8:10:04 PM INFO LYNC: INFO TRANSPORT /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/transport/common/private/TransportUtilityFunctions.cpp/689:<SentRequest>
GET
https://lyncdiscoverinternal.contoso.com/?sipuri=sip:[email protected] 9, 2015 8:10:05 PM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/private/CUcwaAutoDiscoveryGetUserUrlOperation.cpp/224:UcwaAutoDiscoveryGetUserUrlOperation
completed with url =
http://lyncdiscoverinternal.contoso.com/?sipuri=sip:[email protected], userUrl = , status = E_ResponseUnknown (E2-1-5)
GET http://lyncdiscoverinternal.contoso.com/
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "<html><head><meta">http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html><head><meta
http-equiv="refresh" content="0;url=http://finder.cox.net/main?InterceptSource=0&ClientLocation=us&ParticipantID=96e687opkbv4scrood8k84drs6gw5duf&FailureMode=1&SearchQuery=&FailedURI=http%3A%2F%2Flyncdiscoverinternal.contoso.com%2F&AddInType=4&Version=2.1.8-1.90base&Referer=&Implementation=0&method=GET"/><script
type="text/javascript">url="http://finder.cox.net/main?InterceptSource=0&ClientLocation=us&ParticipantID=96e687opkbv4scrood8k84drs6gw5duf&FailureMode=1&SearchQuery=&FailedURI=http%3A%2F%2Flyncdiscoverinternal.contoso.com%2F&AddInType=4&Version=2.1.8-1.90base&Referer=&Implementation=0&method=GET";if(top.location!=location){var
w=window,d=document,e=d.documentElement,b=d.body,x=w.innerWidth||e.clientWidth||b.clientWidth,y=w.innerHeight||e.clientHeight||b.clientHeight;url+="&w="+x+"&h="+y;}window.location.replace(url);</script></head><body></body></html>
</ReceivedResponse>
Mar 9, 2015 8:10:21 PM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/private/CUcwaDataSynchronizer.cpp/799:Mode 0
timed out
Mar 9, 2015 8:11:08 PM ERROR HttpConnection: org.apache.http.conn.HttpHostConnectException:
Connection to https://lyncdiscoverinternal.contoso.com refused
at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:183)
Mar 9, 2015 8:11:08 PM INFO LYNC: INFO TRANSPORT /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/transport/common/private/TransportUtilityFunctions.cpp/1032:<ReceivedResponse>
GET http://lyncdiscover.contoso.com/

Two users can't login to Bonjour, but other users can

All the Macs in my house are set to log into iChat on startup, which creates a defacto messaging network around the house. Quite handy. But now, on one particular machine (a G5 iMac iSight) two users can't seem to log into Bonjour, although on the same machine all the other users can.
I've looked at some other posts on this site, and have checked that Address Book shows 'me' as correct for both users. The Firewall is not set to Essential Services Only, and there is no limit on the bandwidth. The Quicktime streaming setting is set to 1.5 mbps.
In iChat, when using one of the two troublesome logins on the G5, when I click cmd-2 to bring up the Bonjour list, it says Bonjour is not enabled, and gives a click button to enable it. But clicking it does nothing - no effect whatsoever.
When those two same users use the external Buddy List (and an AIM screen name) their iChat works fine.

Hi Nick,
This is what I have found out.
It relates more to Shares shown in the Finder but may offer clues.
I have G4 Tower that has been upgraded from Jaguar actually, to Panther, Tiger and Finally Leopard.
Along the way I bought a MacBook Pro. (Now on Snow Leopard)
At this Point I changed the G4's Computer name to represent it was the G4 and called the MacBook Pro "MacBook Pro" rather than my first Admin Account name (otherwise both Computer names and Short names would have been the same)
I also changed the Leopard's My Card in the Address Book to give it a different Name in iChat.
Somewhere during this process the G4 ended up with a Ralph-G4.local ID, a computer's name of Ralph Johns's Computer, a Address Book ID of Ralph G4 and the short name of ralphjohns
The MacBook Pro has MacBook Pro as the Computer name and .local name and the short name is alsoralphjohns. The Address Book My Card is my full name.
Now in discussion with a Level 4 poster who knows more about this than I do I found out that in Leopard if File Sharing is Off the Bonjour ID is still supposed to show in the Snow Leopard Shares.
However if it is ON whether you use AFP or SMB or Both it is only supposed to appear once and mine was appearing twice.
Changing the Computer name to something else seemed to confuse things (I could not Log on to share from Either Computer)
Changing the name back resolved that but changed the .local ID on the G4 as well.
(Changing the .local name back to what it was before seems to have had now effect now.)
However the G4 now only shows once in the MacBook Pro Shares.
I do not think the Upgrades are the distinguishing feature more my poor attempts at making sure the new (then) MacBook Pro had a different ID than the G4.
I have been able to Bonjour Video and send files as well as see the Other Computer in the Bonjour Buddy lists.
So in summary.
The Address Book My Cards have to be Different.
Sometimes changing the Computer name or the .local name does seem to cause issues in File Sharing - which may have some influence on Bonjour as a whole.
Whilst my G4 was showing up in the MacBook Pro as two Shares it was listing the .local name and the Computer's Name as shown in Sharing which were different.
It maybe this if it is happening for this computer that may give clues.
7:59 PM Thursday; October 15, 2009
Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"

Removed users can still log in

Hi there
I'm having an odd problem about removed users that can still log in. Users are defined on a OD server (OS X server 10.4.4), the users are put into groups, and the different groups can log in to different computers. Works fine, more or less.
However, if I remove a user from a group, he can still log in to all the computers he was able to log in before I removed him! Same is true if I remove an entire group from a computer list - all users that were in that group can still log in to the computer.
E.g:
iMac; login allowed for Group-1, with User01 and User02
-> User01 and User02 can log in. Fine.
Remove User01 from Group-1
-> User01 can still log in to the iMac. ????
Removing Group-1 from the iMac computer list
-> User01 and User02 can still log in. Grrr...
I did several restarts of both the clients and the OD server, trashed the cache files in /Library/Caches and deleted mcx-caches in Netinfo Manager. Nothing helped. It's starting to drive me mad!!
Any ideas?
Thanks, Tina

i persume u delete the cache etc on the clients?

Domain users and local users can't login to reporting service web environment

Hello,
We installed reporting services at one of our customers but aren't able to use domain users to login. We've tried to login with a domain user, a local user but both aren't working. We set the proper permissions for the users on the reports folders.
We can only login with the buildin/administrator account on the local url: http://servername/reports
How can we allow login with domain users on other report manager url's?

Below link may be helpful,
http://social.msdn.microsoft.com/Forums/sqlserver/en-US/623da309-21fa-42a8-905f-1424144a347d/setting-up-a-user-in-ssrs?forum=sqlreportingservices
Regards, RSingh

Lync 2013 Office 365 - Can't Sign in

Hi,
Using Office 365 and Lync 2013.
Windows 7 64bit machine (New) Only built a couple of days ago.
I keep getting the following error
I have 2 machines next to eachother, one works perfect with Lync and signs in fine, the other does not and gets the erro above.
I also have another 3 newly built machines and they are having exactly the same issue.
When I get this message there is an Event as follows
The description for Event ID 0 from source MSOIDSVC.EXE cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
InitializeSvcAPI failed with hr = 0x80048883
I can sign into Office 365 fine, and use all the funcationality.
I have tried the following
Reimage machine - No Success
Uninstall office 2013 - No Success
Removed By licence from Office 365 - No Success
Tried loggin in using the local admin account rather than Domain - No success
I have also tried installing the Microsoft Online Services Sign-in Assistant - No Success
As you can probably tell, im not having much success.
Any Ideas?

Hi there,
It really sounds like network connectivity issues, like firewall or DNS.
Have you tried to connect the clients from another network?
Additionally, have you been trough this help document?
http://office.microsoft.com/en-us/lync-help/troubleshooting-lync-online-sign-in-errors-administrators-HA102892879.aspx
There is also a KB with a lot of resources for troubleshooting Lync Online sign-in issues
http://support.microsoft.com/kb/2541980/en
Best of luck :)
/Anders Eide

2 users can't login - HTTP Status 500 - on Teaming 2.0

I have 2 user that can't login to Teaming 2.0. They get this error: "HTTP Status 500". Even if I enter a bogus password for them the "HTTP Status 500" error occurs. I use LDAP authentication to eDirectory. These users DON'T have duplicate objects in my tree. In eDirectory they have first name, last name, full name, phone number and email address entries. All other users can login. Where are the Apache Tomcat/6.0.18 logs on a SLES 10 install of Teaming 2.0? There are log files in /opt/novell/teaming/
Browser screen content:
HTTP Status 500 -
type Exception report
message
description The server encountered an internal error () that prevented it from fulfilling this request.
exception
org.springframework.dao.IncorrectResultSizeDataAcc essException: Incorrect result size: expected 1, actual 2
org.springframework.security.ldap.SpringSecurityLd apTemplate$3.executeWithContext(SpringSecurityLdap Template.java:204)
org.springframework.ldap.core.LdapTemplate.execute WithContext(LdapTemplate.java:807)
org.springframework.ldap.core.LdapTemplate.execute ReadOnly(LdapTemplate.java:793)
org.springframework.security.ldap.SpringSecurityLd apTemplate.searchForSingleEntry(SpringSecurityLdap Template.java:190)
org.springframework.security.ldap.search.FilterBas edLdapUserSearch.searchForUser(FilterBasedLdapUser Search.java:118)
org.springframework.security.providers.ldap.authen ticator.BindAuthenticator.authenticate(BindAuthent icator.java:82)
org.springframework.security.providers.ldap.LdapAu thenticationProvider.authenticate(LdapAuthenticati onProvider.java:229)
org.springframework.security.providers.ProviderMan ager.doAuthentication(ProviderManager.java:195)
org.springframework.security.AbstractAuthenticatio nManager.authenticate(AbstractAuthenticationManage r.java:46)
org.kablink.teaming.module.authentication.impl.Aut henticationModuleImpl.doAuthenticate(Authenticatio nModuleImpl.java:280)
org.kablink.teaming.module.authentication.impl.Aut henticationModuleImpl.authenticate(AuthenticationM oduleImpl.java:245)
sun.reflect.GeneratedMethodAccessor660.invoke(Unkn own Source)
sun.reflect.DelegatingMethodAccessorImpl.invoke(De legatingMethodAccessorImpl.java:25)
java.lang.reflect.Method.invoke(Method.java:585)
org.springframework.aop.support.AopUtils.invokeJoi npointUsingReflection(AopUtils.java:307)
org.springframework.aop.framework.ReflectiveMethod Invocation.invokeJoinpoint(ReflectiveMethodInvocat ion.java:182)
org.springframework.aop.framework.ReflectiveMethod Invocation.proceed(ReflectiveMethodInvocation.java :149)
org.kablink.teaming.search.interceptor.IndexSynchr onizationManagerInterceptor.invoke(IndexSynchroniz ationManagerInterceptor.java:67)
org.springframework.aop.framework.ReflectiveMethod Invocation.proceed(ReflectiveMethodInvocation.java :171)
org.springframework.aop.interceptor.AbstractTraceI nterceptor.invoke(AbstractTraceInterceptor.java:11 3)
org.springframework.aop.framework.ReflectiveMethod Invocation.proceed(ReflectiveMethodInvocation.java :171)
org.springframework.aop.framework.JdkDynamicAopPro xy.invoke(JdkDynamicAopProxy.java:204)
$Proxy21.authenticate(Unknown Source)
org.springframework.security.providers.ProviderMan ager.doAuthentication(ProviderManager.java:195)
org.springframework.security.AbstractAuthenticatio nManager.authenticate(AbstractAuthenticationManage r.java:46)
org.springframework.security.ui.webapp.Authenticat ionProcessingFilter.attemptAuthentication(Authenti cationProcessingFilter.java:82)
org.springframework.security.ui.AbstractProcessing Filter.doFilterHttp(AbstractProcessingFilter.java: 252)
org.springframework.security.ui.SpringSecurityFilt er.doFilter(SpringSecurityFilter.java:53)
org.springframework.security.util.FilterChainProxy $VirtualFilterChain.doFilter(FilterChainProxy.java :371)
org.springframework.security.ui.logout.LogoutFilte r.doFilterHttp(LogoutFilter.java:89)
org.springframework.security.ui.SpringSecurityFilt er.doFilter(SpringSecurityFilter.java:53)
org.springframework.security.util.FilterChainProxy $VirtualFilterChain.doFilter(FilterChainProxy.java :371)
org.springframework.security.context.HttpSessionCo ntextIntegrationFilter.doFilterHttp(HttpSessionCon textIntegrationFilter.java:235)
org.springframework.security.ui.SpringSecurityFilt er.doFilter(SpringSecurityFilter.java:53)
org.springframework.security.util.FilterChainProxy $VirtualFilterChain.doFilter(FilterChainProxy.java :371)
org.kablink.teaming.spring.security.ZoneGrabbingFi lter.doFilterHttp(ZoneGrabbingFilter.java:58)
org.springframework.security.ui.SpringSecurityFilt er.doFilter(SpringSecurityFilter.java:53)
org.springframework.security.util.FilterChainProxy $VirtualFilterChain.doFilter(FilterChainProxy.java :371)
org.springframework.security.util.FilterChainProxy .doFilter(FilterChainProxy.java:174)
org.springframework.web.filter.DelegatingFilterPro xy.invokeDelegate(DelegatingFilterProxy.java:236)
org.springframework.web.filter.DelegatingFilterPro xy.doFilter(DelegatingFilterProxy.java:167)
note The full stack trace of the root cause is available in the Apache Tomcat/6.0.18 logs.

You need to be sure that it is not an LDAP problem... the best way is to start from LDAP to investigate. Enable the LDAP trace on eDir with imonitor, during the teaming login. Also you can use ldapsearch to have full details on the accounts in order to compare them with a working user (a space somewhere, an additional attribute, etc...).

Lync 2013 mobile client can't see all fields in contact card

We have deployed Lync 2013 infra in our organization, now we observed, mobile Lync client users are not able to see other users mobile number on contact card rest all information is visible.
Is there any workaround or fix to resolve this issue. Appreciate quick help.

That's effectively by design (but a popular complaint). The workaround is to put the users who's mobile numbers you need in your Outlook contact list. There's another workaround related to setting the privacy relationship, but you have to coordinate
it with many people which is not too feasible.
Here are others upset about it:
http://ammarhasayen.com/2013/09/25/lync-2013-mobile-contact-card-not-showing-mobile-number/
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications

Old user can still access mailbox after removing msexch-masteraccountsid

Hi,
I've changed the user mailbox and user by running the following command on the linked mailbox
Set-User -Identity "alias" -LinkedMasterAccount $null
Issue is that the previous user (the msexchmasteraccount) still has access, and yes, that user is still enabled.
My question is - how can I remove that access to the mailbox? The msexchmasteraccount is empty in adsiedit.

Hi,
Any update?
Thanks.
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Niko Cheng
TechNet Community Support

Lync 2013 disabled user can still login.

Similar Messages

Maybe you are looking for