Martin Gibney - Microsoft Teams

I have written the following PowerShell scripts based on the great work of Original Author: Boe Prox   (https://boeprox.wordpress.org). The scripts simply check and report on all required ports between Front End, Edge Server and Reverse Proxy. Each script should be run on the corresponding server: From Front End TO Edge From Edge TO Front End From Reverse Proxy TO Front End I hope these are 1/2 as useful to you as they are to me :)

Very simply: Front End & Edge Servers **********************  Windows PowerShell 3.0 (is installed by default)  Microsoft .NET Framework 4.5 ( http://go.microsoft.com/fwlink/p/?LinkId=268529 )  Windows Identity Foundation 3.5 (part of script below) Add-WindowsFeature RSAT-ADDS, Web-Server, Web-Static-Content, Web-Default-Doc, Web-Http-Errors, Web-Asp-Net, Web-Net-Ext, Web-ISAPI-Ext, Web-ISAPI-Filter, Web-Http-Logging, Web-Log-Libraries, Web-Request-Monitor, Web-Http-Tracing, Web-Basic-Auth, Web-Windows-Auth, Web-Client-Auth, Web-Filtering, Web-Stat-Compression, Web-Dyn-Compression, NET-WCF-HTTP-Activation45, Web-Asp-Net45, Web-Mgmt-Tools, Web-Scripting-Tools, Web-Mgmt-Compat, Telnet-Client, BITS, Desktop-Experience, Windows-Identity-Foundation -Source D:\sources\sxs

A common issue I come across is that the Lync Front End does not replicate with the Edge server. When you run the command "Get-CsManagementStoreReplicationStatus" you see that FALSE is shown for the edge server and no dates are shown for last replication or status. 1. Check that port 4443 is open in each direction (you can use my script to check these ports) 2. Check you can reach the URL https://edgeinternalfqdn.domain.ie:4443/Replicationwebservice URL and are presented with the correct page. 3. If you are running Windows 2012 R2 on the edge check that you do not have more than 200 Certificates in any of the stores on Local Computer store. 4. Add the following .reg file to the edge server and restart the server (This is an important step), this is the usual fix in my opinion. Copy the below into a .reg file and run: **** Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL] "ClientA

So for some reason there are no default policies created in Lync for Conferencing. I have created a few easy cmdlets which will create a Standard, Enterprise and Enterprise Plus Conference policies. These will keep your users within their CAL licensing. You can tweak them where required in relation to sharing/recording. Just remember that Standard CAL users cannot share desktop or start multi-party (3 or more) conferences/calls..... I always set the global policy to the Standard CAL licensing to ensure nothing is missed. Hope this saves you some hassle... # The command below changs the default Global Policy to be set to Standard features to ensure any users on Global policy are set to STD Set-CsConferencingPolicy –Identity “Global” –AllowIPAudio $false -AllowIPVideo $false -Description "Standard CAL Client Policy" -AllowParticipantControl $true -AllowAnnotations $true -AllowUserToScheduleMeetingsWithAppSharing $False -AllowAnonymousUsersToDialO

So now that Windows Update pushes the Skype For Business client to machines your users will now see the following message once updated: Once restarted the user will continue to use the Lync client albeit with a Skype Icon now. Searching for Lync in Windows 7/8/10 will also bring up the Skype client in the results. Some users wish to use the Skype client now (god knows why, its not pretty) and here is how you can go about doing this. Method 1 - Policy from Lync server Lync admins can run the following commands on the Lync Server Management Shell: Set-CsClientPolicy -Identity Global -EnableSkypeUI $true New-CsClientPolicy -Identity SalesClientUI -EnableSkypeUI $true With the second option above being to create a new policy which you can assign per user. Option 2 - Manually on the Client Registry If you have trouble with some clients, you can always update their registry manually: Field Value to select or enter Action Create Hive HKEY_CURRENT

Ok, So while I was getting back into doing actual blogs I figured I needed to insert Powershell script into my blogs. The easiest way of doing this is by using an add-on for the Windows Powershell ISE editor. In its easiest form do the following: 1. Download this following file and extract. 2. Open Powershell as an Administrator and run the following: Set-ExecutionPolicy RemoteSigned 3. Run the setup.exe from the download. 4. Now in Powershell ISE editor, highlight all the code you want, click on Add-Ons at the top menu, then click Copy as HTML. Now simply paste as HTML into your blog! Enjoy. Martin

I created this script as the need to set up the same rules (as a whole) exist in many of the projects I work on. These rules can obviously be changed but should form the basis for your own personalised script. I have put in as many comments as I think are needed so it should guide you well. These are specifically for Ireland as we use a different format for some numbers. For example freephone numbers in most countries are 0800 but in Ireland it is 1800 which means normalising this is not an easy task! The script below assumes calls are being sent to a PSTN Gateway via a SIP trunk. Martin ################# #         # #    BEFORE     # #    YOU BEGIN # #         # ################# # Get the PSTN Gateway ID as you will need this later # Get-CsService -PSTNGateway -- Change this on "VOICE ROUTES" section # Assumes Gateway is already set up. # ################# #         # #    DIAL     # #    PLAN     # #         # ##########

Ok, It's been a few years and I have decided to go at this blogging craic again. I will try to post regularly the issues and tricks I come across in my role on a day to day basis. Only when it is considered useful or when I find it hard to get the answer in the first place. This should be interesting J Martin