Managing User Photos with On Premise Lync 2013 & Office 365

Hello, I'm just looking for a little clarity in terms of expected behavior when using the various methods of modifying user images on these systems.
For example, I've read that Lync 2013 can utilize the high resolution photo that is stored within the user's Exchange mailbox. That would work good in theory, but what about Lync users who do not have an Exchange mailbox (or UM voicemail box)? Presumably
in that case you could use one of the AD attributes, thumbnailPhoto or jpegPhoto, the latter being preferred as it allows for higher resolution images. However in my experience, when using the jpegPhoto attribute, dirsync does successfully replicate the photo
and it shows up on the O365 portal, but the on-premise Lync server/clients have inconsistent success displaying them. Some user's can see other user's photos, but they can see eachothers or vice versa and eventually the Lync client stops displaying any of
these photos.
Ideally for us, if we could use the jpegPhoto attribute for all users, as opposed to using exchange attributes for some, that would be best, but is it designed to work this way?

Hi FuzzMunk,
I don’t think that Lync Server will
synchronize the photo from
JPEGPhoto attribute, as I know
it only synchronizes the photo from
thumbnailPhoto attribute in Active Directory.
You can see the photo displayed on Office365 portal
because it synchronizes the photo from both the
thumbailphoto and jpegphoto attributes.
Some related articles and cases for your reference.
http://blogs.technet.com/b/nexthop/archive/2010/11/22/microsoft-lync-2010-photo-experience.aspx
https://technet.microsoft.com/en-us/library/jj688150.aspx
https://social.technet.microsoft.com/Forums/lync/en-US/3ffc4fcd-eefc-4eca-bc7e-bcd007157199/lync-photo-from-active-directory
https://social.technet.microsoft.com/Forums/windowsserver/en-US/53859480-a345-4ce0-a04e-9f1fc7a947c2/what-is-the-difference-between-jpegphoto-and-thumbnailphoto-attribute-in-ad?forum=winserverDS
Best regards,
Eric

Similar Messages

Add list item using anonymous user in public website of shareopint 2013 office 365

Can any body know the solution to over come of following error while add list item using anonymous user using CSOM in shareopint 2013 office 365 public website.
I have tried following solution to narrow down the error from "Access permission"
http://sharepointtaproom.com/2014/08/28/anonymous-api-access-for-office-365-public-sites/#comment-2304

Try below:
http://www.codeproject.com/Articles/785099/Publish-a-Form-for-Anonymous-Users-on-a-Public-Sit
http://blogs.technet.com/b/sharepointdevelopersupport/archive/2013/06/13/how-to-allow-anonymous-users-to-add-items-to-sharepoint-list-using-client-object-model.aspx
// Allows AddItem operation using anonymous access
private
static voidAllowAnonAccess(){
Console.WriteLine("Enabling Anonymous access....");
SPWebApplication webApp =
SPWebApplication.Lookup(new
Uri(webAppUrl));
            webApp.ClientCallableSettings.AnonymousRestrictedTypes.Remove(typeof(Microsoft.SharePoint.SPList),
"GetItems");
            webApp.ClientCallableSettings.AnonymousRestrictedTypes.Remove(typeof(Microsoft.SharePoint.SPList),
"AddItem");
            webApp.Update();
Console.WriteLine("Enabled Anonymous access!");
// Revokes Add/Get Item operation using anonymous access
private static
voidRemoveAnonAccess(){
Console.WriteLine("Disabling Anonymous access....");
SPWebApplication webApp =
SPWebApplication.Lookup(new
Uri(webAppUrl));
            webApp.ClientCallableSettings.AnonymousRestrictedTypes.Add(typeof(Microsoft.SharePoint.SPList),
"GetItems");
            webApp.ClientCallableSettings.AnonymousRestrictedTypes.Add(typeof(Microsoft.SharePoint.SPList),
"AddItem");
            webApp.Update();
Console.WriteLine("Disabled Anonymous access!");
http://www.fiechter.eu/Blog/Post/12/Create-a-survey-for-anonymous-users-on-Office-365
If this helped you resolve your issue, please mark it Answered

Lync 2013 Office 365 - Can't Sign in

Hi,
Using Office 365 and Lync 2013.
Windows 7 64bit machine (New) Only built a couple of days ago.
I keep getting the following error
I have 2 machines next to eachother, one works perfect with Lync and signs in fine, the other does not and gets the erro above.
I also have another 3 newly built machines and they are having exactly the same issue.
When I get this message there is an Event as follows
The description for Event ID 0 from source MSOIDSVC.EXE cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.
If the event originated on another computer, the display information had to be saved with the event.
The following information was included with the event:
InitializeSvcAPI failed with hr = 0x80048883
I can sign into Office 365 fine, and use all the funcationality.
I have tried the following
Reimage machine - No Success
Uninstall office 2013 - No Success
Removed By licence from Office 365 - No Success
Tried loggin in using the local admin account rather than Domain - No success
I have also tried installing the Microsoft Online Services Sign-in Assistant - No Success
As you can probably tell, im not having much success.
Any Ideas?

Hi there,
It really sounds like network connectivity issues, like firewall or DNS.
Have you tried to connect the clients from another network?
Additionally, have you been trough this help document?
http://office.microsoft.com/en-us/lync-help/troubleshooting-lync-online-sign-in-errors-administrators-HA102892879.aspx
There is also a KB with a lot of resources for troubleshooting Lync Online sign-in issues
http://support.microsoft.com/kb/2541980/en
Best of luck :)
/Anders Eide

Lync 2013 (Office 365) Voice Mail to Text

Environment: Lync 2013 (Microsoft Office 365 ProPlus)
Issue: When the voice mail ends up in outlook inbox, the transcription (voice to text) is very poor. Why?
Any idea what technology MSFT is using for transcription (the voice commands within the voice mail system work well, but the transcription is very poor)? Most large businesses use Dragon (by Nuance).
Hope MSFT fixes this or just drop the transcription function until it works properly.

That's actually pretty good. Here is one I received from Lync to Lync using Polycom CX600
Hey Joy.
Wanted to give reckon on split covering -- a few will offer free sometimes this week can be.
Set up a meeting only send an email on this as well there give me a call back when you get a chance thanks bye.
Actual audio was:
Hey Georg,
Wanted to pick your brain on split tunneling, if you are free some time this week can we setup a meeting? I am going to send you an email on this as well. Give me a call back when you get
a chance. Thanks, bye.
Although they're even worse when they come from PSTN.
If this helped you please click "Vote As Helpful" if it answered your question please click "Mark As Answer"
Georg Thomas | Lync MVP
Blog www.lynced.com.au | Twitter
@georgathomas
Lync Edge Port Check (Beta)

Lync 2011 for MAC not connecting externally to On-Premise Lync 2013

Hello,
Hopefully someone has some idea on this or a better direction for me to follow. So currently I have an issue where Lync 2011 for MAC clients will not connect when external to my On-Premise Lync 2013 servers. Everything to do with my Windows based clients
and even cell phone based client’s works just fine. It is currently only Lync 2011 for MAC which will not correct externally.
I did initially have the logon problem internally as noted by other posts online when using an internal CA certificate with Lync. But with the internal certificate imported onto the MAC when internally connected Lync 2011 will login just fine. Now in my
setup I do have a TMG server that clients are connecting to that forwards the connections onto my Lync servers when connecting externally. When I review live real time logs to see what’s connecting to the external URL for Windows based clients I can see them
connect in on port 443 no problem.
But with the MAC I don’t see any attempt from it to connect to the URL like I see with the Windows clients. Now below is what shows up in the Microsoft-Lync.log generated by the MAC. Now initially looking at the log I thought my problem was the fact when
Lync 2011 tires to connect when external that it was doing so on port 5061 which we don’t have open. So I tired entering external.mydomain.com:443 in for my external server in the setup.
And while rechecking the log after doing so shows like it is now trying to connect on port 443. When reviewing TMG I again see no connection attempt by the MAC to connect to the Lync external url or on port 443. Further research so far into the problem has
come up empty on the subject. And most other cases where people report problems connecting externally they are using some form of online service like Office 365. So at this point I am not even sure if Lync 2011 for MAC is supposed to work externally with On-Premise
Lync 2013 deployments or not. If anyone has an thought’s or idea’s please share them as at this point I am stuck on this issue.
Microsoft Lync 14.0.10 (141024)
MacOS version 10.7.5 (build 11G63)
2015/01/08 08:51:11.807 SIPService::OnEvent(IApplicationLayerEvent &), type: 0, HasSignedIn(): 0, HasSignedOut: 0
2015/01/08 08:51:12.670 SIPService::OnEvent(NModel::ILogonSessionEvent), hr: 0x0, oldState: 0, newState: 10, direction: 0
2015/01/08 08:51:12.682 SIPService::OnEvent(IApplicationLayerEvent &), type: 1, HasSignedIn(): 0, HasSignedOut: 0
2015/01/08 08:51:12.685 SIPService::OnEvent(IApplicationLayerEvent &), type: 3, HasSignedIn(): 0, HasSignedOut: 0
2015/01/08 08:51:20.192 Office Communications Server LOGON STARTED: USER = {nsayewich}
2015/01/08 08:51:20.197 SIPService::Logon
2015/01/08 08:51:20.281 SIPService::OnEvent(IApplicationLayerEvent &), type: 1, HasSignedIn(): 0, HasSignedOut: 0
2015/01/08 08:51:20.543 SIPService::OnEvent(IApplicationLayerEvent &), type: 3, HasSignedIn(): 0, HasSignedOut: 0
2015/01/08 08:51:20.543 SIPService::OnEvent(IApplicationLayerEvent &), type: 1, HasSignedIn(): 0, HasSignedOut: 0
2015/01/08 08:51:20.566 SIPService::OnEvent(IApplicationLayerEvent &), type: 3, HasSignedIn(): 0, HasSignedOut: 0
2015/01/08 08:51:20.566 SIPService::OnEvent(IApplicationLayerEvent &), type: 1, HasSignedIn(): 0, HasSignedOut: 0
2015/01/08 08:51:20.568 SIPService::OnEvent(IApplicationLayerEvent &), type: 3, HasSignedIn(): 0, HasSignedOut: 0
2015/01/08 08:51:20.568 SIPService::OnEvent(IApplicationLayerEvent &), type: 1, HasSignedIn(): 0, HasSignedOut: 0
2015/01/08 08:51:20.600 SIPService::OnEvent(NModel::ILogonSessionEvent), hr: 0x0, oldState: 10, newState: 20, direction: 0
2015/01/08 08:51:21.535 InternalConnect, NLResolveAddress returned: -3176
2015/01/08 08:51:21.537 IsLocalAddress, 'internal.mydomain.com' is not a local address
2015/01/08 08:51:21.537 FShouldUseProxy, is returning 1
2015/01/08 08:51:21.537 Connecting to internal.mydomain.com (port 0)
2015/01/08 08:51:21.537 InternalConnect, NLCreateConnection returned: -3176,
2015/01/08 08:51:21.537 FUsingHttpsTunnelProxies, returning: 0
2015/01/08 08:51:21.537 Listening thread got exception -3176
2015/01/08 08:51:23.632 InternalConnect, NLResolveAddress returned: 0
2015/01/08 08:51:23.633 IsLocalAddress, 'external.mydomain.com' is not a local address
2015/01/08 08:51:23.633 FShouldUseProxy, is returning 1
2015/01/08 08:51:23.633 Connecting to external.mydomain.com (port 5061)
2015/01/08 08:51:38.004 InternalConnect, NLCreateConnection returned: -3259,
2015/01/08 08:51:38.004 FUsingHttpsTunnelProxies, returning: 0
2015/01/08 08:51:38.004 Listening thread got exception -3259
2015/01/08 08:51:38.005 InternalConnect, NLResolveAddress returned: 0
2015/01/08 08:51:38.006 IsLocalAddress, 'external.mydomain.com' is not a local address
2015/01/08 08:51:38.006 FShouldUseProxy, is returning 1
2015/01/08 08:51:38.006 Connecting to external.mydomain.com (port 5061)
2015/01/08 08:51:53.008 InternalConnect, NLCreateConnection returned: -3259,
2015/01/08 08:51:53.008 FUsingHttpsTunnelProxies, returning: 0
2015/01/08 08:51:53.008 Listening thread got exception -3259
2015/01/08 08:51:55.026 SIPService::OnEvent(NModel::ILogonSessionEvent), hr: 0x80072743, oldState: 20, newState: 10, direction: 1
2015/01/08 08:51:55.026 Login (1) failed with error: (0.-2147014845)
2015/01/08 08:51:55.036 SIPService::OnEvent(IApplicationLayerEvent &), type: 8, HasSignedIn(): 0, HasSignedOut: 0
2015/01/08 08:51:55.036 SIPService::OnEvent(IApplicationLayerEvent &), type: 2, HasSignedIn(): 0, HasSignedOut: 0
2015/01/08 08:51:55.036 SIPService::OnEvent(IApplicationLayerEvent &), type: 4, HasSignedIn(): 0, HasSignedOut: 0
2015/01/08 08:51:55.037 SIPService::OnEvent(IApplicationLayerEvent &), type: 6, HasSignedIn(): 0, HasSignedOut: 0
2015/01/08 08:51:55.037 SIPService::OnEvent(IApplicationLayerEvent &), type: 4, HasSignedIn(): 0, HasSignedOut: 0
2015/01/08 08:51:55.038 SIPService::OnEvent(IApplicationLayerEvent &), type: 6, HasSignedIn(): 0, HasSignedOut: 0
2015/01/08 08:51:55.038 SIPService::OnEvent(IApplicationLayerEvent &), type: 4, HasSignedIn(): 0, HasSignedOut: 0
2015/01/08 08:51:55.040 SIPService::OnEvent(IApplicationLayerEvent &), type: 6, HasSignedIn(): 0, HasSignedOut: 0

Hi Nicholas Sayewich,
I tested in my lab and without any problem.
I also use TMG as Reverse Proxy and without configuring SRV records (My ISP don’t support SRV), after importing the root certificate onto MacBook, I can sign into Lync everywhere(internal
and external).
Please make sure that the certificate is set up to
Always Trust .
http://blogs.technet.com/b/nexthop/archive/2008/03/05/how-to-install-a-trusted-root-ca-certificate-on-osx-leopard-for-use-with-messenger-for-macintosh.aspx
And my log for your reference:
Microsoft Lync 14.0.10 (141024)
MacOS version 10.10.1 (build 14B25)
2015/01/09 22:40:15.802 SIPService::OnEvent(IApplicationLayerEvent &), type: 0, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:16.486 SIPService::OnEvent(NModel::ILogonSessionEvent), hr: 0x0, oldState: 0, newState: 10, direction: 0
2015/01/09 22:40:16.493 SIPService::OnEvent(IApplicationLayerEvent &), type: 1, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:16.496 SIPService::OnEvent(IApplicationLayerEvent &), type: 3, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:32.595 Office Communications Server LOGON STARTED: USER = {MyDomain\LyncUser1}
2015/01/09 22:40:32.596 SIPService::Logon
2015/01/09 22:40:32.633 SIPService::OnEvent(IApplicationLayerEvent &), type: 1, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:32.737 SIPService::OnEvent(IApplicationLayerEvent &), type: 3, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:32.738 SIPService::OnEvent(IApplicationLayerEvent &), type: 1, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:32.743 SIPService::OnEvent(IApplicationLayerEvent &), type: 3, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:32.743 SIPService::OnEvent(IApplicationLayerEvent &), type: 1, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:32.744 SIPService::OnEvent(IApplicationLayerEvent &), type: 3, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:32.744 SIPService::OnEvent(IApplicationLayerEvent &), type: 1, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:32.754 SIPService::OnEvent(NModel::ILogonSessionEvent), hr: 0x0, oldState: 10, newState: 20, direction: 0
2015/01/09 22:40:33.080 InternalConnect, NLResolveAddress returned: 0
2015/01/09 22:40:33.082 IsLocalAddress, 'sipinternal.MyDomain.com' is not a local address
2015/01/09 22:40:33.082 FShouldUseProxy, is returning 1
2015/01/09 22:40:33.082 Connecting to sipinternal.MyDomain.com (port 5061)
2015/01/09 22:40:48.008 InternalConnect, NLCreateConnection returned: -3259,
2015/01/09 22:40:48.008 FUsingHttpsTunnelProxies, returning: 0
2015/01/09 22:40:48.010 Listening thread got exception -3259
2015/01/09 22:40:50.043 InternalConnect, NLResolveAddress returned: 0
2015/01/09 22:40:50.044 IsLocalAddress, 'sip.MyDomain.com' is not a local address
2015/01/09 22:40:50.044 FShouldUseProxy, is returning 1
2015/01/09 22:40:50.044 Connecting to sip.MyDomain.com (port 443)
2015/01/09 22:40:50.896 InternalConnect, NLCreateConnection returned: 0,
2015/01/09 22:40:50.896 InternalConnect, NLCopyConnectionBinding returned: 0,
2015/01/09 22:40:52.980 InternalConnect, NLResolveAddress returned: 0
2015/01/09 22:40:52.981 IsLocalAddress, 'sip.MyDomain.com' is not a local address
2015/01/09 22:40:52.981 FShouldUseProxy, is returning 1
2015/01/09 22:40:52.981 Connecting to sip.MyDomain.com (port 5061)
2015/01/09 22:40:53.291 InternalConnect, NLCreateConnection returned: 0,
2015/01/09 22:40:53.291 InternalConnect, NLCopyConnectionBinding returned: 0,
2015/01/09 22:40:53.522 HRESULT GetLinkSpeed(DWORD, DWORD*, WIN_BOOL*): ip 192.168.100.187, link speed 0
2015/01/09 22:40:53.522 HRESULT GetLinkSpeed(DWORD, DWORD*, WIN_BOOL*): Working around 0 link speed
2015/01/09 22:40:53.526 SIPService::OnEvent(NModel::ILogonSessionEvent), hr: 0x0, oldState: 20, newState: 30, direction: 0
2015/01/09 22:40:53.528 SIPService::OnEvent(IApplicationLayerEvent &), type: 3, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:53.529 SIPService::OnEvent(IApplicationLayerEvent &), type: 1, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:53.536 SIPService::OnEvent(IApplicationLayerEvent &), type: 3, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:53.536 SIPService::OnEvent(IApplicationLayerEvent &), type: 1, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:53.536 SIPService::OnEvent(IApplicationLayerEvent &), type: 3, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:53.536 SIPService::OnEvent(IApplicationLayerEvent &), type: 1, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:53.536 SIPService::OnEvent(IApplicationLayerEvent &), type: 3, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:53.536 SIPService::OnEvent(IApplicationLayerEvent &), type: 1, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:53.555 SIPService::OnEvent(IApplicationLayerEvent &), type: 3, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:53.555 SIPService::OnEvent(IApplicationLayerEvent &), type: 1, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:53.583 SIPService::OnEvent(IApplicationLayerEvent &), type: 3, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:53.584 SIPService::OnEvent(IApplicationLayerEvent &), type: 1, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:53.592 SIPService::OnEvent(IApplicationLayerEvent &), type: 3, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:53.592 SIPService::OnEvent(IApplicationLayerEvent &), type: 1, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:53.615 SIPService::OnEvent(IApplicationLayerEvent &), type: 3, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:53.615 SIPService::OnEvent(IApplicationLayerEvent &), type: 1, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:53.622 SIPService::OnEvent(IApplicationLayerEvent &), type: 3, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:53.622 SIPService::OnEvent(IApplicationLayerEvent &), type: 1, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:53.784 SIPService::OnEvent(IApplicationLayerEvent &), type: 3, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:53.784 SIPService::OnEvent(IApplicationLayerEvent &), type: 1, HasSignedIn(): 0, HasSignedOut: 0
2015/01/09 22:40:53.786 SIPService::OnEvent(IApplicationLayerEvent &), type: 3, HasSignedIn(): 1, HasSignedOut: 0
2015/01/09 22:40:53.787 virtual void SIPService::OnIdleHandleLogonSucceeded()
2015/01/09 22:40:53.792 Office Communications Server LOGON ENDED: USER = { MyDomain\LyncUser1}
2015/01/09 22:40:54.151 IsLocalAddress, 'lyncpool01' is not a local address
2015/01/09 22:40:54.151 FShouldUseProxy, is returning 1
2015/01/09 22:40:54.379 IsLocalAddress, 'lyncpool01' is not a local address
2015/01/09 22:40:54.379 FShouldUseProxy, is returning 1
2015/01/09 22:40:55.082 IsLocalAddress, 'lyncpool01' is not a local address
2015/01/09 22:40:55.082 FShouldUseProxy, is returning 1
2015/01/09 22:40:55.440 IsLocalAddress, 'lyncpool01' is not a local address
2015/01/09 22:40:55.440 FShouldUseProxy, is returning 1
2015/01/09 22:40:55.683 IsLocalAddress, 'lyncpool01' is not a local address
2015/01/09 22:40:55.683 FShouldUseProxy, is returning 1
2015/01/09 22:40:57.238 IsLocalAddress, 'lyncpool01' is not a local address
2015/01/09 22:40:57.238 FShouldUseProxy, is returning 1
2015/01/09 22:40:57.239 IsLocalAddress, 'lyncpool01' is not a local address
2015/01/09 22:40:57.239 FShouldUseProxy, is returning 1
2015/01/09 22:40:57.241 IsLocalAddress, 'lyncpool01' is not a local address
2015/01/09 22:40:57.241 IsLocalAddress, 'lyncpool01' is not a local address
2015/01/09 22:40:57.241 IsLocalAddress, 'lyncpool01' is not a local address
2015/01/09 22:40:57.241 FShouldUseProxy, is returning 1
2015/01/09 22:40:57.241 FShouldUseProxy, is returning 1
2015/01/09 22:40:57.241 FShouldUseProxy, is returning 1
Best regards,
Eric

Manage user certificates with UE-V?

Is it possible to manage user certificates with UE-V? I wish to store/manage Personal Certificates with UE-V but can't seem to find information about how to achieve this. Are Roaming Profiles still needed to have user certificates follow users
or can this be hacked into UE-V. I tried to create a template which handles the HKCU and User AppData paths which store Certificates but have not been able to get this to work.
Windows 7/Windows 8 Server 2008R2/Server2012
Any insight would be appreciated.
Thanks,
Mark Ringo

Hi Mark
Certificates are currently not supported with UE-V 1.0 / 1.0 SP1. Just saving HKCU keys and the RSA / System Certificate files in APPDATA does not work any more since Windows Vista. You have to use a logon / logoff script which does the trick via Microsoft
CryptoAPI (Export / Import).
I have included exampled with Powershell below.
Cheers
Michael
ExportCert.ps1
# Scriptname: ExportCert.ps1
# Author: Michael Rüefli
# Purpose: Export certificates local certificate store (Machine or User) to a PKCS12 file format
# Version: 1.0.1
# Fixed Issues / Changes:
# V 1.0.1 / Fixed Export where no filter has been specified. Changed the autogenerated password strenght
function ConvertToSid([STRING]$NtAccount)
$result = (New-Object system.security.principal.NtAccount($NTaccount)).translate([system.security.principal.securityidentifier])
return $result.value
#Get the Arguments
$exportpath = $args[0]
$certstore = $args[1]
$issuer_filter = $args[2]
#Check the Args
If ($args.count -lt 2)
Write-host "Too less arguments! Usage: ExportCert.ps1 <exportpath> <certstore> [<filter> optional>" -ForegroundColor red
write-host "Example: Powershell.exe ExportCert.ps1 H:\Certs CurrentUser DC=LOC" -ForegroundColor blue
exit
#Error Handler
Trap [Exception]{continue}
#Check Exportpath, if not there create it
If ((Test-Path -Path $exportpath) -ne $True)
New-Item -Path $exportpath -ItemType Directory
#Get certificates in store
If ($issuer_filter)
$HKCUCerts = (dir cert:\$certstore\My | ? { $_.Issuer -notmatch $issuer_filter})
Else
$HKCUCerts = (dir cert:\$certstore\My)
#process each certificate
Foreach ($cert in $HKCUCerts)
$friendlyname = $cert.FriendlyName
$type = [System.Security.Cryptography.X509Certificates.X509ContentType]::pfx
$username = $env:USERNAME
$sid = ConvertToSid $username
$pass = 'Letmein$$Cert2012'
$pass_secure = ConvertTo-SecureString -AsPlainText $pass -Force
$bytes = $cert.export($type, $pass)
[System.IO.File]::WriteAllBytes("$exportpath\$friendlyname.pfx", $bytes)
ImportCert.ps1
# Scriptname: ImportCert.ps1
# Author: Michael Rüefli
# Purpose: Import PKCS12 certificates from a file share into local certificate store (Machine or User)
# Version: 1.0
# Fixed Issues / Changes:
# V 1.0.1 / Changed the autogenerated password strenght
function ConvertToSid([STRING]$NtAccount)
$result = (New-Object system.security.principal.NtAccount($NTaccount)).translate([system.security.principal.securityidentifier])
return $result.value
#Get the Arguments
$importpath = $args[0]
$certstore = $args[1]
#Check the Args
If ($args.count -lt 2)
write-host "Too less arguments! Usage: ImportCert.ps1 <importpath> <certstore>" -ForegroundColor red
write-host "Example: Powershell.exe ImportCert.ps1 H:\Certs CurrentUser" -ForegroundColor blue
exit
#Error Handler
Trap [Exception]{continue}
function Import-PfxCertificate
param([String]$certPath,[String]$certRootStore,[String]$certStore,$pfxPass = $null,[String]$KeySet)
#Error Handler
Trap [Exception]{continue}
if ($args[0] -eq "-h")
Write-Host "usage: Import-509Certificate <Filename>,<certstore>,<cert root>,<keyset> `n `
Valid certstores: LocalMachine,CurrentUser `n `
Valid cert root: My,AuthRoot,TrustedPublisher `n `
Valid Keysets: MachineKeySet,UserKeySet"
break
write-host "Importing Certificate: $certPath"
$pfx = new-object System.Security.Cryptography.X509Certificates.X509Certificate2
if ($pfxPass -eq $null) {$pfxPass = read-host "Enter the pfx password" -assecurestring}
$pfx.import($certPath,$pfxPass,"MachineKeySet,Exportable,PersistKeySet")
$store = new-object System.Security.Cryptography.X509Certificates.X509Store($certStore,$certRootStore)
$store.open("MaxAllowed")
$store.add($pfx)
$store.close()
$username = $env:USERNAME
$certs = Get-ChildItem $importpath -Filter "*.pfx"
Foreach ($item in $certs)
$item
$friendlypath = $item.FullName
$friendlyname = ($item.Name).replace(".pfx","")
$sid = ConvertToSid $username
"$friendlyname-$username"
$pass = 'Letmein$$Cert2012'
$pass_secure = ConvertTo-SecureString -AsPlainText $pass -Force
Import-PfxCertificate "$friendlypath" "$certstore" "My" $pass_secure

Project Pro 2013 and syncing with SharePoint Online 2013 (Office 365)

Good day,
I am experiencing some challenges with a Project Pro master project file and syncing to SharePoint 2013 (Office 365).
What works
Individual projects can be synced to SharePoint without issue. Once synced, the site start page presents the Project Summary gant, clicking the Tasks link takes me to the tasks. Project files are stored in the Site Assets directory in each SharePoint site
(one site per project file).
What doesn't work
When I create a new project (and sync it to a new site), then add two (2) existing project files that reside on SharePoint and then sync to the new master project site I
don't see any content in the Project Summary gant, nor do I see any tasks in the task list. I can't figure out if this is not supported or if I've done something wrong. There are no error messages or indicators that I've done something wrong,
short of the master project projects not showing up on the master project site (nothing in the project summary gant and no tasks).
Some help would be greatly appreciated. Being able to render a master project is crucial to understanding timelines for many projects in a single view.

Steven,
This is by design. Inserted Sub projects will NOT show in the Master Project Tasks list. You will only see tasks inserted directly at the Master Project Level.
Moreover, if you set up a dependency between Master project Task and Subproject task, then the sync will not work. All in all, there are limitations for this process, which is where Project Online/Project Server needs to be considered.
Cheers,
Prasanna Adavi, Project MVP
Blog:
Podcast:
Twitter:
LinkedIn:

How to delete duplicate attribute in on premise server for office 365 dir sync tool

Hi,
Please anyone help to how to remove duplicate attribute in on premise server for office 365 dir sync tool .
While running the dirsync tool iam getting the below error :
"Unable to update this object because the following attributes associated with this object have values that may already be associated with another object in your local directory services: [ProxyAddresses smtp:[email protected],SMTP:[email protected];].
Correct or remove the duplicate values in your local directory. Please refer to http://support.microsoft.com/kb/2647098 for more information on identifying objects with duplicate attribute value"
Still i am troubleshooting to reslove this problem . I have run the ID Fix tool there i could see some 10 duplicate errors . Next what should i do , please anyone help me to find it
Thanks.....

Hi,
Please anyone help to how to remove duplicate attribute in on premise server for office 365 dir sync tool .
While running the dirsync tool iam getting the below error :
"Unable to update this object because the following attributes associated with this object have values that may already be associated with another object in your local directory services: [ProxyAddresses smtp:[email protected],SMTP:[email protected];].
Correct or remove the duplicate values in your local directory. Please refer to http://support.microsoft.com/kb/2647098 for more information on identifying objects with duplicate attribute value"
Still i am troubleshooting to reslove this problem . I have run the ID Fix tool there i could see some 10 duplicate errors . Next what should i do , please anyone help me to find it
Thanks.....

App-V Office 2013/Office 365?

Hi,
In order to App-v Office 2013, apparently you need Office 365 ProPlus? How to get it, we do have Office 2013 ProPlus but that's not sufficient? Don't get what the difference is actually.
Note: we don't want to use Office 2013 click-n-run.
J.
Jan Hoedt
Note: the click-n-run doesn't give the option to mention you Exchange server, the junk folder used in Outlook etc., that's what we really need (just as the setup.exe /admin option in Office.

The difference between Office 365 ProPlus and Office Professional Plus 2013 is licensing only as the text you've quoted shows and as Rory has provided details on as well.
This is separate from how you deploy Office. With either Office 365 or Office 2013 you can choose to use a standard installation or the Office Deployment Tool (App-V). Office 365 also provides the Click-to-Run version which you download from the Office 365
site.
If you have licensed Office 365, but want to use the Volume License media, you may have to purchase the media separately (which is really a download from the Volume License site). You may be required to purchase the minimum of 5 VL licenses to get access
to the media, but check with a Microsoft licensing expert for clarification.
The only supported method of deploying Office 2013 / Office 365 with App-V is via the Office Deployment Tool. This means that you can't use the VL media (SETUP /ADMIN) to create a configuration and capture that with the Sequencer.
See these articles for more info:
https://support.microsoft.com/kb/2772509 (Rory has already posted this one)
http://support.microsoft.com/kb/2915745
Please remember to click "Mark as Answer" or "Vote as Helpful" on the post that answers your question (or click "Unmark as Answer" if a marked post does not actually
answer your question). This can be beneficial to other community members reading the thread.
This forum post is my own opinion and does not necessarily reflect the opinion or view of my employer, Microsoft, its employees, or other MVPs.
Twitter:
@stealthpuppy | Blog:
stealthpuppy.com |
The Definitive Guide to Delivering Microsoft Office with App-V

What are share point server 2013 & Share point Designer 2013 & Office 365 & Yammer & Share point 2013 & Windows server 2008 server & Windows Server 2012 Server Data Center?

I need some clarifications.
What are share point server 2013 & Share point Designer 2013 & Office 365 & Yammer & Share point 2013 & Windows server 2008 server & Windows Server 2012 Server Data Center? How each them are related in collaboration system?
Is Share point server 2013 and Share pointer Designer 2013 available in 32bit version? If not, then how to use it in 32 bit machine by using any VMs?
Thanks
Senthil

SharePoint Server 2013:
http://office.microsoft.com/en-us/microsoft-sharepoint-collaboration-software-FX103479517.aspx
SharePoint Designer 2013:
Designer is used to develop SharePoint pages using HTML/CSS/JS as well as SharePoint Designer Workflows
Yammer:
https://about.yammer.com/
Windows Server is Windows, but the Server OS. SharePoint runs on top of supported Windows Servers editions (see http://technet.microsoft.com/en-us/library/cc262485.aspx).
SharePoint Server is 64-bit only (trial:
http://technet.microsoft.com/en-us/evalcenter/hh973397.aspx), although Designer does have a 32-bit edition (full product:
http://www.microsoft.com/en-us/download/details.aspx?id=35491).
You will need the capability to run 64bit VMs. Minimum recommended all-in-one VM for SharePoint is to allocate 24GB of RAM, but you can get away with as little as 12GB (I wouldn't go below that). Because of this, it generally rules out 32bit OSes as a virtual
machine host.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Can't move Users from On Premise Lync 2013 to Lync Online (Office 365)

Hi all
I try to move a single User from a local Lync Installation to Office 365 Lync. Everything is working locally, but in the Lync Powershell i face the following error:
The User with the following SIP-URI can't be found in the Active Directory. HostedMigration fault: Error = 201.
I didn't found anything on the web for the Error 201.
The User exists, and is synchronised with Azure AD eg Office 365. He has an E4 Plan.
Help would be very appreciated!

Hi,
Please check if the federation SRV record point to the local Edge Server.
Please make sure the Sign-on and directory synchronization works normally.
Best Regards,
Eason Huang
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Eason Huang
TechNet Community Support

Unable to share files when in a IM convo with multiple people Lync 2013

Hello,
I'm in the middle of a migration from lync server 2010 to lync server 2013. The users I have migrated over to lync 2013 are not able to send/share attachments when in a convo with multiple people.
However, users can send/share files when IM'ing with individual people.
I've been researching this issue for quite some time but still having a problem pinpointing the issue.
Any help would be greatly appreciated.
Thanks.

Hi,
Did the issue also happen between users who still in Lync server 2010 pool?
Did the issue happen internal or external?
Please double check if MCU on Lync 2013 FE server works well, when two participants are connected, the session is essentially peer-to-peer. When three or more participants are connected, the Sharing feature depends on the Front End Server Multi Point Control
Unit (MCU) to provide the sharing stream to all parties.
Best Regards,
Eason Huang
Eason Huang
TechNet Community Support

SQL HA with Mirroring for Lync 2013

Hi All,
Does SQL mirroring require Windows clustering in place? or Lync 2013 just manages the mirroring?

The network file share is only required while the actual SQL mirroring is initially created as soon as the Lync 2013 topology is published. Clearly, the share should have sufficient space to handle the size of the existing databases with some buffer
to spare.
Please share with us if this helps.
Thanks / rgds,
TechNet/MSDN Forum Moderator - http://www.leedesmond.com

OneDrive for Business iPad App with on-premise SharePoint 2013

I don't know if this has more to do with OneDrive for Business or SharePoint 2013 itself.
Basically we are trying to log into OneDrive for Business on the iPad app but it says "Sorry, this app doesn't support this type of authentication"
We are using Claims Based Authentication with our On-premise SharePoint 2013 environment, which according to this table is a supported method: h**p://office.microsoft.com/en-us/office365-sharepoint-online-enterprise-help/use-the-onedrive-for-business-app-on-an-iphone-or-ipad-HA104005688.aspx#_Supported__authentication
We have tried different combinations of the username and url. Windows username, DOMAIN\username, email address, username@domain, etc. nothing seems to work.
Any ideas on how to fix this?

according to office blog, it does support SharePoint on prem with following authentication(NTLM & FBA)
Introducing OneDrive for Business for iOS v1.2
Q. Does this announcement apply to customers who have deployed SharePoint 2013 on-premises?
A. Yes. The OneDrive for Business for iOS v1.2 app does support some SharePoint on-premises configurations (NTLM & FBA). We are committed to providing customers access to their OneDrive for Business in SharePoint 2013 on-premises. We also recently introduced
new capabilities in SharePoint 2013 SP1 to more seamlessly connect on-premises investments to OneDrive for Business in Office 365. More information to be shared at SharePoint Conference 2014 (March 3-6 in Las, Vegas); we will link to the relevant information
once it has been posted next week.
Please remember to mark your question as answered &Vote helpful,if this solves/helps your problem. ****************************************************************************************** Thanks -WS MCITP(SharePoint 2010, 2013) Blog: http://wscheema.com/blog

Lync 2013 with ipad clinet (lync 2013)

Hi All
I have deployed lync 2013 and installed only the JAN -14 updates over it, my setup is in split brain dns (same name internal & external) and I have added all lync discovery A record to point to the internal IP.my problem is ipad client 2010 is working
fine however ipad client 2013 is not able to connect at all, what I am missing here?
PS: I am using public certificate for the internal servers & Lync connectivity analer go green on every thing when I chose Lync Mobile 2013
please help

Do you have server autodetect turned on in both client versions? Are you signing into both version from the same type of network location (ie. internal WiFi). Does it work if you switch to a different WiFi location that would be external?
Also, you said before "I have added all lync discovery A record to point to the internal IP."
If you have lyncdiscover.<yourdomain> pointing to internal, but mobilty set to external, it won't work. Set lyncdiscover in your internal DNS zone to your external reverse proxy IP.

Managing User Photos with On Premise Lync 2013 & Office 365

Similar Messages

Maybe you are looking for