Martin Gibney - Microsoft Teams

I have written the following PowerShell scripts based on the great work of Original Author: Boe Prox   (https://boeprox.wordpress.org). The scripts simply check and report on all required ports between Front End, Edge Server and Reverse Proxy. Each script should be run on the corresponding server: From Front End TO Edge From Edge TO Front End From Reverse Proxy TO Front End I hope these are 1/2 as useful to you as they are to me :)

Very simply: Front End & Edge Servers **********************  Windows PowerShell 3.0 (is installed by default)  Microsoft .NET Framework 4.5 ( http://go.microsoft.com/fwlink/p/?LinkId=268529 )  Windows Identity Foundation 3.5 (part of script below) Add-WindowsFeature RSAT-ADDS, Web-Server, Web-Static-Content, Web-Default-Doc, Web-Http-Errors, Web-Asp-Net, Web-Net-Ext, Web-ISAPI-Ext, Web-ISAPI-Filter, Web-Http-Logging, Web-Log-Libraries, Web-Request-Monitor, Web-Http-Tracing, Web-Basic-Auth, Web-Windows-Auth, Web-Client-Auth, Web-Filtering, Web-Stat-Compression, Web-Dyn-Compression, NET-WCF-HTTP-Activation45, Web-Asp-Net45, Web-Mgmt-Tools, Web-Scripting-Tools, Web-Mgmt-Compat, Telnet-Client, BITS, Desktop-Experience, Windows-Identity-Foundation -Source D:\sources\sxs

A common issue I come across is that the Lync Front End does not replicate with the Edge server. When you run the command "Get-CsManagementStoreReplicationStatus" you see that FALSE is shown for the edge server and no dates are shown for last replication or status. 1. Check that port 4443 is open in each direction (you can use my script to check these ports) 2. Check you can reach the URL https://edgeinternalfqdn.domain.ie:4443/Replicationwebservice URL and are presented with the correct page. 3. If you are running Windows 2012 R2 on the edge check that you do not have more than 200 Certificates in any of the stores on Local Computer store. 4. Add the following .reg file to the edge server and restart the server (This is an important step), this is the usual fix in my opinion. Copy the below into a .reg file and run: **** Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL] "ClientA...

So for some reason there are no default policies created in Lync for Conferencing. I have created a few easy cmdlets which will create a Standard, Enterprise and Enterprise Plus Conference policies. These will keep your users within their CAL licensing. You can tweak them where required in relation to sharing/recording. Just remember that Standard CAL users cannot share desktop or start multi-party (3 or more) conferences/calls..... I always set the global policy to the Standard CAL licensing to ensure nothing is missed. Hope this saves you some hassle... # The command below changs the default Global Policy to be set to Standard features to ensure any users on Global policy are set to STD Set-CsConferencingPolicy –Identity “Global” –AllowIPAudio $false -AllowIPVideo $false -Description "Standard CAL Client Policy" -AllowParticipantControl $true -AllowAnnotations $true -AllowUserToScheduleMeetingsWithAppSharing $False -AllowAnonymousUsersToDialO...

So now that Windows Update pushes the Skype For Business client to machines your users will now see the following message once updated: Once restarted the user will continue to use the Lync client albeit with a Skype Icon now. Searching for Lync in Windows 7/8/10 will also bring up the Skype client in the results. Some users wish to use the Skype client now (god knows why, its not pretty) and here is how you can go about doing this. Method 1 - Policy from Lync server Lync admins can run the following commands on the Lync Server Management Shell: Set-CsClientPolicy -Identity Global -EnableSkypeUI $true New-CsClientPolicy -Identity SalesClientUI -EnableSkypeUI $true With the second option above being to create a new policy which you can assign per user. Option 2 - Manually on the Client Registry If you have trouble with some clients, you can always update their registry manually: Field Value to select or enter Action Create Hive HKEY_CURRENT...

Ok, So while I was getting back into doing actual blogs I figured I needed to insert Powershell script into my blogs. The easiest way of doing this is by using an add-on for the Windows Powershell ISE editor. In its easiest form do the following: 1. Download this following file and extract. 2. Open Powershell as an Administrator and run the following: Set-ExecutionPolicy RemoteSigned 3. Run the setup.exe from the download. 4. Now in Powershell ISE editor, highlight all the code you want, click on Add-Ons at the top menu, then click Copy as HTML. Now simply paste as HTML into your blog! Enjoy. Martin

I created this script as the need to set up the same rules (as a whole) exist in many of the projects I work on. These rules can obviously be changed but should form the basis for your own personalised script. I have put in as many comments as I think are needed so it should guide you well. These are specifically for Ireland as we use a different format for some numbers. For example freephone numbers in most countries are 0800 but in Ireland it is 1800 which means normalising this is not an easy task! The script below assumes calls are being sent to a PSTN Gateway via a SIP trunk. Martin ################# #         # #    BEFORE     # #    YOU BEGIN # #         # ################# # Get the PSTN Gateway ID as you will need this later # Get-CsService -PSTNGateway -- Change this on "VOICE ROUTES" section # Assumes Gat...

Ok, It's been a few years and I have decided to go at this blogging craic again. I will try to post regularly the issues and tricks I come across in my role on a day to day basis. Only when it is considered useful or when I find it hard to get the answer in the first place. This should be interesting J Martin

Creating and assigning certificates on OCS 2007 R2 Edge Server So you now need to install certificates on the Edge server. The following is the correct method to do the following. In my scenario I have a server with 2 NICs - Internal: 192.168.41.200 External: 87.219.43.22 *********** Internal CA for the following Certificates: - A/V Edge Server role - Internal Connection Public Certificates for the following roles: - Access Edge (SIP) - Web Conferencing Role Internal Certificates can be created from this and should be done on the ROOT CA SERVER (as your edge server is not on the domain): · select “Create a new certificate” · Choose which Interface you will create for (Internal or A/V for these) · Prepare the request, and send immediately · Name: Logical name for your interface, use DNS name, also ensure Include client EKU is ticked · Fill in owner details · Cho...

OCS Quality of Experience (QoE) While preparing my last post, I consolidated some quick facts about the QoE functionality that should benefit people who are considering deploying this role: 1. There is no additional server license (to your enterprise or standard license) required for this role. For OCS 2007, the role can be downloaded here . 2. In OCS 2007 R2, the QoE functionality and the Call Detail Record (CDR) functionality were merged into the OCS 2007 R2 Monitoring Role. 3. Supported OCS 2007 QoE Collocation: a. The OCS 2007 QoE Monitoring Server cannot be collocated with other Office Communications Server 2007 server roles. b. The OCS 2007 QoE SQL Database can be collocated with the QoE server, or installed on a dedicated server. 4. Supported OCS 2007 R2 Monitoring Role Collocation: a. A variety of collocation scenarios are supported depending on your scalability requirements. b. The OCS 2007 R2 Monitoring Role service and database can be collocated with a computer running Stan...