Lync 2013 SQL Permission after install

We have started to install Lync 2013 Enterprise to replace our Lync 2010 Standard servers.  Since we are moving to enterprise I've had to ask the SQL dba to get envolved with the installation.  We followed the recommended permission document here..
http://technet.microsoft.com/en-us/library/gg398375.aspx
we gave the install account Sysadmin and local admin on the SQL server.
Now that the install is complete our dba wants to remove sysadmin from the account and remove it from SQL. 
Can we do that or does it need to stay in place?
Thanks,
Matt

Hi Matt,
You should be able to remove it now that the databases have been created as it should only be required for installation. You just need to make sure that your users accounts for management are part of the appropriate RBAC groups.
The only caveat I can think of is if you need to do some SQL configuration tasks like deploy mirroring or run an update that may need to drop and rebuild the database. In those scenario you would need to have it reapplied.
If this helped you please click "Vote As Helpful" if it answered your question please click "Mark As Answer"
Georg Thomas | Lync MVP
Blog www.lynced.com.au | Twitter
@georgathomas
Lync Edge Port Check (Beta)

Similar Messages

  • Lync 2013 updating databases after updating Front End servers

    We have a front-end server pool consisting of 3 Lync 2013 servers and a back end of 2 SQL servers using SQL mirroring.  All servers are Windows 2008 R2.
    Following the instructions in
    http://support2.microsoft.com/kb/2809243 , I verified that the servers were all ready for updates, then I ran the
    Stop-CsWindowsService -Graceful cmdlet to stop the Lync services on the first FE server, then I ran LyncServerUpdateInstaller.exe to install the updates.  After the updates were installed, I restarted the server, waited for Lync services
    to all start, then repeated the process on the next 2 servers in turn.  This was all successful.
    I am now looking at step 2 in this document, applying the back-end database updates, and I have a problem and some questions.  The problem is that all the databases had the principal copy on the mirrored SQL server.  I ran the recommended Invoke-CsDatabaseFailover
    -NewPrincipal Primary cmdlet repeatedly, using all the database types I could find, but I still have two databases (database names
    xds and lis) on the mirrored server.  Since the cmdlet requires a database type, what type of databases are the xds and the lis databases?
    Once I get that done, I an still unsure of exactly what to run to update the databases.  The KB article states to run Install-CsDatabase -ConfiguredDatabases -SqlServerFqdn FEBE.FQDN -Verbose .  Do I type this in exactly
    as stated, or is FEBE.FQDN a variable for our SQL server or some other entity in our environment?  If I do use the actual SQL Server name in that, do I run it twice, using the name of the mirrored SQL server the second time?  
    Thank you very much for your help.

    Hi Logan Burt,
    Central Management store database files
    Data file or log purpose
                    Xds.ldf
    Transaction log file for the Central Management store
                    Xds.mdf
    Maintains the configuration of the current Lync Server 2013 topology, as defined and published by Topology Builder
                    Lis.mdf
    Location Information service data file
                    Lis.ldf
    Transaction log for the Location Information service data file
    And you could verify if Lync Server 2013 database updates have completed successfully.
    How to Verify if Lync Server 2013 Database Updates Completed Successfully
    http://blogs.technet.com/b/dodeitte/archive/2013/07/02/how-to-verify-if-lync-server-2013-database-updates-completed-successfully.aspx
    Best regards,
    Eric

  • CMS Movement from Lync 2010 to Lync 2013 SQL Mirroring

    Hi,
    I have read the articles and i know how to move CMS to Lync 2013 , MY question is after moment CMS to Lync 2013 , the new DBs on SQL server will be mirrored automatically or i have to apply some procedure to make them mirror.
    Regards
    Usman Ghani
    Usman Ghani - MCITP Exchange 2010

    Good morning,
    If the new Lync 2013 Enterprise Pool you deployed has a mirrored backend, then when you move the CMS to that instance the database will inherently be mirrored. There is no requirement to perform any additional action or procedure.
    This assumes that you have an enterprise Lync 2013 deployment as a mirrored CMS would not be available on a standard edition deployment.
    Kind regards
    Ben
    Note: If you find a post informative, please mark it so using the arrow to the left. If it answers a question you've asked, please mark the thread as answered to aid others when they're looking for solutions to similar problems or queries.
    Lync Skype Blog: Gecko-Studio

  • Lync 2013: SQL instance - Shared or Not Shared !?

    I'll keep this straight to the point... I'm implementing Lync 2013 at my company and we stumbled on one SQL Cluster situation that's causing some questions on the DBA team.
    So the situation is....
    Background:
    We currently have a two node SQL 2008 R2 (SP2) Cluster with two instances in it that are shared for other applications.
    Question:
    Is it recommended by Microsoft (or any Lync Expert at all) to use one of these instances for Lync 2013 databases, or should it be a separated instance to host Lync 2013 Databases?
    Note: If to be created the new instance, that instance will be living in the same cluster.
    Thank you all in advance for comments on this.

    Thanks to both for the replies. It does help me thinking about the subject.
    I've meanwhile opened an advisory case with MS to check what they say about it. (I'm posting the results afterwards of course to share their advice)
    I agree with both of you, and in fact I don't really like the idea of having a shared instance for Lync 2013 with other products (specially one of them that's in there that is Sharepoint 2013). I'm quite curious on knowing how will the instance behave once
    Sharepoint 2013 decides to "eat up" all the resources...
    I think that having the separated instance adds at least 2 very good (and important values) that is:
    1 - Security (at the instance level.. no unwanted sysadmin's - we have persistent chat by some God forsaken reason... though I don't like the idea that a DBA with the right knowledge to read our C*O's chat's going around...)
    2 - Resource assignment control (better memory control, possibility of "shifting" the instance to another place if necessary + if someone "brings down" the shared instance for any reason, lync can continue to function)
    The IO concern regarding lots of SQLServer.exe running around, it's also a valid concern in my opinion, though at IO level is basically the same story because what matters is the DB file read-write operations that are ongoing and that will consume the same
    resources either you're in a dedicated instance or separated one... 
    Still our DBA brings up the fact that we need to use a shared instance for everything and he wants me to put Lync all together with the other DB's (Sharepoint 2013 included...).
    What are your thoughts about this?
    Thanks once again for your time and comments.

  • Lync 2013 SQL versus Exchange Archiving

    Our organization has setup an internal lab for Lync and is trying to decide what the best option would be for deploying archiving with Lync and what the pros vs cons are.
    We currently have one Lync 2013 FE Server and an Exchange 2010 server, which I already know does not support archiving. Would it be best to deploy a SQL server for archiving or upgrade Exchange 2010 to 2013? We can do either, but was is the recommended approach
    and best practice/pros/cons?
    I was planning on utilizing SQL server as the preferred for approach and so we don't have to upgrade Exchange -- just seems easier and will keep any additional load off the Exchange server and once deployed to a production environment. 
    Thanks.

    Agree with Michael.
    This data stored in Archiving database is not searchable, but it can be exported to formats that are searchable using other tools.
    You can check the difference between these two archiving options at
    http://technet.microsoft.com/en-us/library/jj204900.aspx.
    Lisa Zheng
    TechNet Community Support

  • Lync 2013 aborts (crashes) after call is terminated

    Computer is on a network. Desktop is running Win 7 64 bit with lync 2013. When the user terminates a call lync aborts and asks if user wants to restart Lync. I believe this is profile related as I logged on as myself with my credentials and could not
    make the same issue happen.  The user also logged into a different computer and worked fine. Did not crash after ending a call. This issue just started as the user has been with this computer for quite some time with no issues before now.
    Is there a fix for the user profile?
    Thanks

    You can enable log on phone device, then check if the phone got the BYE signal in log file.
    The log files are stored on the Lync filestore associated with the pool where the user logged into the phone hosted. Should be something like 
    \\fileserver\LyncShare\*WebServices*\DeviceUpdateLogs\...
    Lisa Zheng
    TechNet Community Support

  • Where to running SQL Scripts after install of ODAC for Oracle Client?

    I just installed ODAC for Oracle Client on a windows server, that runs a sql server database, for developers to connect a web app to an Oracle/Unix database. The install states to run SQL scripts located in the $ORACLE_HOME\ASP.NET\SQL directory after the install. I'm not sure where to run them? On the ORACLE DB on the Unix server? If someone could bring me up to speed I would appreciate it. Thanks.

    If I do run the scripts, do you know what user they should be run as? The developer are using ASP.NET for connectivity.
    Why there is no Oracle Expert answer this simple question? ?
    After ODAC 11.1.0.7.20 installation completed, there is a message in the last screen:
    *"Run the SQL script located in c:\app\Administrator\product\11.1.0\client_1\ASP.NET\SQL directory for a new installation or an upgrade of Oracle Providers for ASP.NET"*
    The question is: How to run these 9 SQL scripts ?
    In SQL*Plus, which oracle user should I connect to in order to run these 9 scrips, including:
    InstallAllOracleASPNETProviders.sql
    InstallOracleASPNETCommon.sql
    InstallOracleMembership.sql
    InstallOraclePersonalization.sql
    InstallOracleProfile.sql
    InstallOracleRoles.sql
    InstallOracleSessionState.sql
    InstallOracleSiteMap.sql
    InstallOracleWebEvents.sql

  • Lync 2013 SQL Mirroring

    I have Lync server 2013 SQL mirroring in place.  My firm is looking to decrease our SQL server count. Can I collocate none Lync databases on the Mirror Lync SQL instance? Thanks.

    Hi TTMing,
    It’s not recommend collocating Lync Server databases with other databases, this might affect availability and performance.
    Form https://technet.microsoft.com/en-us/library/gg398990%28v=ocs.15%29.aspx?f=255&MSPPError=-2147217396
    “If you collocate Lync Server databases with other databases, we highly recommend assessing all factors that might affect availability and performance, as well as ensuring that, if one node fails, the remaining node can handle the load. To verify failover
    capabilities, we recommend testing all failover scenarios. ”
    Best regards,
    Eric
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Lync 2013 sql database on existing lync 2010 sql server

    Dear All,
    I have query regarding the SQL server requirement for Lync 2013 enterprise,when there is a co-existence or migration from lync 2010 to 2013, it it possible to use the same Lync 2010 enterprise  sql server with different instance name or we have to create
    a new sql server for lync 2013, please advice me.
    Thanks and regards,
    sarma kumar

    No it is not possible. Topology builder won't allow it, it needs to be a completely different server name. 
    When you input the server into Topology builder you enter the server name and instance in two separate fields, it will give you a red X as soon as you try to put the server name in if it's already in the topology.
    If this helped you please click "Vote As Helpful" if it answered your question please click "Mark As Answer" | Blog
    www.lynced.com.au | Twitter
    @imlynced

  • Lync 2013 SQL Backend Witness replacement

    Can we replace backend SQL witness server via lync 2013 topology builder as H/W of existing witness server needs to be released due to some technical reason.
    We don’t prefer P2V. I want fresh installation of SQL witness server with SQL 2012 express edition and then move the witness role
    What is the procedure for the same?
    Please help me for the same

    Hi,
    deploy the new SQL server which dedicated for Witness. Configure the topology and associate the new SQL server as the witness server and publish. remove the old SQL store which was configured as the Witness form the topology.
    Z-Hire -- Automate Lync User Account creation process ( AD / Exchange / Lync )

  • Lync 2013 Updates before initial install

    Have done the initial install of Lync 2013 and working to complete all Windows updates before the setting up topology.  There are several Lync updates that are showing that need to installed.  Can those be applied before I start the install of
    Lync or should I wait until everything is up and running.
    Update Rollup for Lync Server 2013 admin tools KB2837510
    Update Rollup for Lync Server 2013 core componets KB2881682
    Update Rollup for Lync Server 2013 unified communications managed api 4.0 core runtime x64 KB2881685
    Thanks,

    Hi,
    As per the description of the KB article of the updates; mentioned that Front End and other Lync roles are in Operations state; Refer the link below:
    http://support.microsoft.com/kb/2809243/en-gb
    Alternatively, you can download and install LyncServerUpdateInstaller.exe; This will install all the latest updates for Lync.

  • MacBook Pro Retina Late 2013 UI Lag after installing Yosemite

    Hey everyone,
    Ok so my Issue here, and I think I'm not the only one but my MacBook pro retina late 2013 (8GB ram, 256gb SSD) has been experiencing numerous issues after installing Yosemite. For example, the UI lag is at times horrible; after opening several apps, and especially after having a pdf or two open in preview everything becomes so sluggish. the animation of switching to mission control is painstakingly slow, and opening new tabs in safari takes 2 or 3 seconds. I've done a clean install of yosemite but nothing seems to help, what should I do; just revert back to mavericks and cross my finger for a future update?
    Any help would be much appreciated, thanks so much !

    i am in the same situation as you, late 2013 retina MacBook Pro 15 inch upgraded to yosemite and then clean installed yosemite b/c of UI lag after opening several apps at once... I found that yosemite drained my battery life too, on mavericks i was getting 5-8 hrs of battery life, on yosemite i was getting like 2-3 hrs most.
    After exhausting every option out there (apple store genius bar help, apple repair, etc), I came to the consensus that my macbook had no hardware problems at all, it's basically a software problem on apple's end.  and until they update yosemite with a specific fix for the UI lag and the battery consumption problems, i am not going back to yosmemite. 
    what i did was clean installed back to mavericks... this solved every one of my problems, NO LAG, NO BATTERY ISSUES, back to buttery smooth performance, of course without the new UI however... but i can live without new design
    this experience tells me several things: 1. the new apple under the leadership of cook is slowly but surely sacrificing quality of software for unnecessary updates(sales) 2. mac hardware is still good but who knows for how much longer

  • Lync 2013 sql mirroring with different doamin sql server.

    Hi,
    can I create lync BE sql mirroring with different domain sql server with one AD forest?
    Thanks.

    Hi,
    You can note the sentence “Using Topology Builder or cmdlets to set up and remove SQL mirroring is supported only when the primary, mirror, and witness (if desired) servers all belong to the same domain. If you want to set up SQL mirroring among servers
    in different domains, see your SQL Server documentation.” In the link below:
    http://technet.microsoft.com/en-us/library/jj204992.aspx
    So I think in Lync server if you use Topology Builder or cmdlets to set up and remove SQL mirroring only if when the primary, mirror, and witness (if desired) servers all belong to the same domain. If you want to set up SQL mirroring among servers in different
    domains you may do some steps on SQL server and you can also post a case on SQL forum, thank you for your understanding.
    http://social.technet.microsoft.com/Forums/sqlserver/en-US/home?category=sqlserver
    Best Regards,
    Eason Huang
    Eason Huang
    TechNet Community Support

  • SQL permission after Lync deployment

    My BDA team had give me the right permission on their SQL backend to deploy Lync entreprise.
    So far, so good.  Lync has been deployed.
    Now they are wondering is they can remove some rights?
    They have gave me the rights has stated here:
    http://technet.microsoft.com/en-us/library/gg398375.aspx
    (Granted RTCUniversalServerAdmins  the sysadmins SQL Server security group and member of the SQL Server local Administrators group)
    Basically, they want to remove the RTCUniversalServerAdmins  group fron the SQL Server local Administrators group
    Thanks for any help

    Hi EQ,
    For Lync administration and operation, the Lync administrator should be the member of CsAdministrator group.
    There is a document
    Administrator Rights and Permissions Required for Setup and Administration for reference. Hope it’s useful.

  • Lync 2013 stopped working after update

    Lync starts up fine, but when I click a contact or receive a message, Lync crashes
    I already updated and repaired office.
    I do have office 2010 and 2013 installed, but 2010 doesn't have Lync so there shouldn't be a conflict there.
    Event logs:
    Log Name:      Application
    Source:        Application Error
    Date:          16/10/2014 11:40:51
    Event ID:      1000
    Task Category: (100)
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      TSS-DXCSJX1.teu.tomra.corp
    Description:
    Faulting application name: lync.exe, version: 15.0.4659.1001, time stamp: 0x5423b435
    Faulting module name: lync.exe, version: 15.0.4659.1001, time stamp: 0x5423b435
    Exception code: 0xc0000005
    Fault offset: 0x00e70000
    Faulting process id: 0x1740
    Faulting application start time: 0x01cfe9254143f6df
    Faulting application path: C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
    Faulting module path: C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
    Report Id: 83b07477-5518-11e4-bdc0-005056c00008
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Application Error" />
        <EventID Qualifiers="0">1000</EventID>
        <Level>2</Level>
        <Task>100</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2014-10-16T09:40:51.000000000Z" />
        <EventRecordID>104534</EventRecordID>
        <Channel>Application</Channel>
        <Computer>TSS-DXCSJX1.teu.tomra.corp</Computer>
        <Security />
      </System>
      <EventData>
        <Data>lync.exe</Data>
        <Data>15.0.4659.1001</Data>
        <Data>5423b435</Data>
        <Data>lync.exe</Data>
        <Data>15.0.4659.1001</Data>
        <Data>5423b435</Data>
        <Data>c0000005</Data>
        <Data>00e70000</Data>
        <Data>1740</Data>
        <Data>01cfe9254143f6df</Data>
        <Data>C:\Program Files (x86)\Microsoft Office\Office15\lync.exe</Data>
        <Data>C:\Program Files (x86)\Microsoft Office\Office15\lync.exe</Data>
        <Data>83b07477-5518-11e4-bdc0-005056c00008</Data>
      </EventData>
    </Event>
    Log Name:      Application
    Source:        SideBySide
    Date:          16/10/2014 11:40:43
    Event ID:      35
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      TSS-DXCSJX1.teu.tomra.corp
    Description:
    Activation context generation failed for "C:\Program Files (x86)\Microsoft Office\Office15\lync.exe.Manifest".Error in manifest or policy file "C:\Program Files (x86)\Microsoft Office\Office15\UccApi.DLL" on line 1. Component identity found
    in manifest does not match the identity of the component requested. Reference is UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0". Definition is UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
    Please use sxstrace.exe for detailed diagnosis.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="SideBySide" />
        <EventID Qualifiers="49409">35</EventID>
        <Level>2</Level>
        <Task>0</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2014-10-16T09:40:43.000000000Z" />
        <EventRecordID>104515</EventRecordID>
        <Channel>Application</Channel>
        <Computer>TSS-DXCSJX1.teu.tomra.corp</Computer>
        <Security />
      </System>
      <EventData>
        <Data>UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"</Data>
        <Data>UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0"</Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>C:\Program Files (x86)\Microsoft Office\Office15\lync.exe.Manifest</Data>
        <Data>C:\Program Files (x86)\Microsoft Office\Office15\UccApi.DLL</Data>
        <Data>1</Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Data>
        </Data>
      </EventData>
    </Event>

    Same error here. I just had to re-install windows so it installed a good 300+ updates and no way to know which one could have been the culprit. 
    Alexander, do you know what update (KBXXXXXXX) you recently installed? 
    Here is my error:
    Activation context generation failed for "C:\Program Files (x86)\Microsoft Office\Office15\lync.exe.Manifest".Error in manifest or policy file "C:\Program Files (x86)\Microsoft Office\Office15\UccApi.DLL" on line 1. Component identity
    found in manifest does not match the identity of the component requested. Reference is UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0". Definition is UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
    Please use sxstrace.exe for detailed diagnosis.
    System
    Provider
    [ Name]
    SideBySide
    EventID
    35
    [ Qualifiers]
    49409
    Level
    2
    Task
    0
    Keywords
    0x80000000000000
    TimeCreated
    [ SystemTime]
    2014-10-17T13:55:56.000000000Z
    EventRecordID
    3786
    Channel
    Application
    Computer
    SERVECIG
    Security
    EventData
    UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"
    UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0"
    C:\Program Files (x86)\Microsoft Office\Office15\lync.exe.Manifest
    C:\Program Files (x86)\Microsoft Office\Office15\UccApi.DLL
    1

Maybe you are looking for