Why work with Lync and Exchange in Atea?

• Atea strive to always deliver best practice deployments
• There are about thirty active consultants with Lync and Exchange as their primary focus placed all over the country
• Some of the consultants have worked with Microsoft UC as their primary focus since Live Communications Server 2005
• We have an active internal community that share knowledge internally using SharePoint 2010 and strive to help each other as best we can
• Atea encourage consultants to be active within the global Microsoft community through forums, blogging, presenting and user groups

Who should apply?

• You want to deep dive and focus on becoming a valuable resource within Lync and Exchange
• You are always looking for new challenges and want to work with a variety of deployments from simple to complex
• You want to learn from some of the best Lync consultants in Norway
• You aim for Certified Master within Lync or Exchange
• You are familiar with PowerShell scripting

Where to apply?

• Oslo: http://www.finn.no/finn/job/fulltime/object?finnkode=31571479
• Drammen: http://www.finn.no/finn/job/fulltime/object?finnkode=31771272
• Bodø: http://www.finn.no/finn/job/fulltime/object?finnkode=31395958

Why is Atea the best UC team in Norway?

• Atea is Microsoft Unified Communication Partner of the Year Norway four times in a row
• Atea focus on more than Microsoft UC, we have great teams within Cisco, Avaya, Aastra, CIC, Trio, Competella, Telenor and TeliaSonera
• Atea focus on and have the ability to deliver best of breed solutions across multiple platforms

The reason for creating this script is when migrating customers in Norway most of them want to allow everyone to use side by side calendaring in Outlook and Oulook Web App. In Exchange 2003/2007 we needed to instruct users how to set Default to Reviewer. This script sets it for all users. The script works for both Exchange Online and Exchange Server 2010. For Exchange 2007 check out this post on how to do it: http://exchangeshare.wordpress.com/2008/05/27/faq-give-calendar-read-permission-on-all-mailboxes-pfdavadmin/

Get the script here: http://msunified.net/exchange-downloads/script-set-calendarpermissions-ps1/

What the script does

As the picture shows you get three menu items.

1. Will set the permission on all users and resources
2. Will set the permission on all users and reources created the last 30 days
3. Will give a user you specify Editor access to a mailbox you specify
• This is good for switchboard or secretary functions

How to run the script against an Exchange Online environment

• Connect to Exchange Online through PowerShell Remoting

$cred = Get-Credential
$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershell -Credential $cred -Authentication Basic -AllowRedirection
Import-PSSession $Session

• Set Execution Policy to unrestricted

Set-ExecutionPolicy Unrestricted

• Run the script by copying the script, saving it as a ps1 file, navigate to it in PowerShell and start typing set-Cal and hit TAB to use TAB completion

.\Set-CalendarPremissions.ps1

Resources

Administering Microsoft Office 365 using Windows PowerShell: http://blog.powershell.no/2011/05/09/administering-microsoft-office-365-using-windows-powershell/

Now that Lync has gone RTM and Virtual Launch is done we need to get down to business and deploy Lync to the general masses. During the time of Beta, RC and early RTM a lot of great blog articles were published about features and how to configure them. I wanted to collect the posts I find interesting here so I have them all in one place when I deploy Lync Server to my customers. I will update this article with new posts as I find them or when they get published.

Last updated: 16.10.2011

• Lync Server 2010 Deployment
  • Installing Prerequisites on Server 2008 R2: http://msunified.net/2010/11/23/installing-lync-server-2010-prerequisites-on-windows-server-2008-r2/
  • Part 1: http://blog.schertz.name/2010/09/lync2010rc-deployment-part1/
  • Part 2: http://blog.schertz.name/2010/09/lync2010rc-deployment-part2/
  • Part 3: http://blog.schertz.name/2010/10/lync2010rc-deployment-part3/
  • Deploying Lync Server EDGE: http://ocsguy.com/2010/11/21/deploying-an-edge-server-with-lync/
  • Deploying XMPP for Lync: http://ocsguy.com/2010/11/29/deploying-lync-for-xmpp/
  • Publishing Lync Server Web Components and Simple URLs: http://ucmadeeasy.wordpress.com/2010/09/24/publishing-lync-server-2010-rc-simple-urls-and-web-components-with-forefront-tmg-2010/
  • What is Central Management Store (CMS): http://blogs.technet.com/b/jenstr/archive/2010/10/13/what-is-central-management-store-cms.aspx
  • Remote Administration: http://blog.powershell.no/2010/12/05/lync-server-2010-remote-administration/
  • Another Reason to Include a Director in Your Lync Server 2010 Deployment: http://blogs.technet.com/b/dodeitte/archive/2010/12/26/another-reason-to-include-a-director-in-your-lync-server-2010-deployment.aspx
  • Protecting the Edge Server Against DoS and Password Brute-Force Attacks in Lync Server 2010: http://blogs.technet.com/b/drrez/archive/2011/04/11/protecting-the-edge-server-against-dos-and-password-brute-force-attacks-in-lync-server-2010.aspx
• Exchange 2010 integration
  • UM: http://blog.schertz.name/2010/11/lync-and-exchange-um-integration/
  • Lync calls to Exchange Auto Attendant Fail: http://blog.schertz.name/2010/11/lync-calls-to-exchange-auto-attendant-fail/
  • OWA: http://blog.schertz.name/2010/11/lync-and-exchange-im-integration/
• Lync 2010 Client
  • Custom Presence State: http://blog.schertz.name/2010/11/adding-custom-presence-to-lync/
  • Client Policies: http://www.shudnow.net/2010/10/28/lync-2010-client-policies/
  • Lync to Windows Live A/V Federation: http://www.confusedamused.com/notebook/lync-to-windows-live-av-federation/
  • Microsoft Lync 2010 Photo Experience: http://blogs.technet.com/b/nexthop/archive/2010/11/22/microsoft-lync-2010-photo-experience.aspx
  • How to Customize the Meeting Entry Page for Lync: http://ocsguy.com/2010/12/04/how-to-customize-the-meeting-entry-page-for-lync/
  • Reordering Lync 2010 Dial-In Conferencing Numbers: http://www.shudnow.net/2011/09/28/reordering-lync-2010-dial-in-conferencing-numbers/
  • Hide the Lync Conferencing Add-In for Outlook: http://aspoc.net/archives/2011/09/23/hide-the-lync-conferencing-add-in-for-outlook/
  • Lync for Mac – GPO equivalents: http://mac2.microsoft.com/help/office/14/en-us/lyncdeploy/item/81755f45-3c1b-4d09-bef1-2cf48b9fc29a?category=fb7c71bb-c9bd-4f45-873f-851be7af1489
  • Understanding and Enforcing Licensing for the Lync Standard User CAL: http://howdouc.blogspot.com/2011/09/understanding-and-enforcing-licensing.html
  • Configuring Lync Client Access Capabilities to Meet Client Access License Requirements: http://blogs.technet.com/b/nexthop/archive/2011/10/13/configuring-lync-client-access-capabilities-to-meet-client-access-license-requirements.aspx
  • Configure unique meeting ID by default: http://blogs.technet.com/b/wesglock/archive/2011/05/16/lync-meeting-policy-and-outlook-add-on-behavior.aspx
• Lync Phone Edition
  • Configuring Lync Server for Phone Edition Devices: http://blog.schertz.name/2010/12/configuring-lync-server-for-phone-edition-devices/
  • Externally Provisioning Lync Phone Edition: http://blog.schertz.name/2010/12/configuring-lync-server-for-phone-edition-devices/
  • Updating Lync Phone Edition Devices: http://blog.schertz.name/2011/01/updating-lync-phone-edition-devices/
  • Manual VLAN Configuration for Lync Phone Edition: http://blog.schertz.name/2011/01/manual-vlan-configuration-for-lync-phone-edition/
  • Common Area Phone Configuration in Lync: http://blog.schertz.name/2011/04/common-area-phone-configuration-in-lync/
  • Analog Phone support with Lync 2010 using MP-114: http://www.lynclog.com/2011/04/analog-phone-support-with-lync-2010.html
  • Localization and Language Support in Lync Phone Edition: http://blog.schertz.name/2011/05/localization-and-language-support-in-lync-phone-edition/
• The Addressbook in Lync Server 2010
  • Updating the Lync 2010 Address Book: http://blog.schertz.name/2010/09/updating-the-lync-2010-address-book/
  • How to add Photos in Lync 2010: http://www.codesalot.com/2010/photos-in-lync-2010/
  • Lync 2010 Address Book Normalization: http://blog.schertz.name/2010/09/lync-2010-address-book-normalization/
    Lync 2010 People & Skill Search with SharePoint 2010 and TMG: http://techblurt.com/2011/02/22/lync-2010-people-search-with-sharepoint-2010-and-tmg/
  • Hotfix for generating the Invalid_AD_Phone_Numbers List for Lync: http://aspoc.net/archives/2011/10/28/hotfix-for-generating-the-invalid_ad_phone_numbers-list-for-lync/
• Lync 2010 Networking
  • DHCP for Network Communications and PIN/Certificate Authentication: http://www.shudnow.net/2010/11/18/lync-2010-dhcp-for-network-communications-and-pincertificate-authentication/
  • Using DHCPUtil for Lync Phone Edition DHCP Server Configuration: http://www.confusedamused.com/notebook/using-dhcputil-for-lync-phone-edition-dhcp-server-configuration/
  • Port Ranges and Audio/Media Negotiation: http://www.shudnow.net/2010/12/06/lync-server-2010-port-ranges-and-audiomedia-negotiation/
  • Configuring DirectAccess for Lync/OCS voice/video in a split DNS scenario: http://donnystyle.wordpress.com/2011/04/17/configuring-directaccess-for-lync-ocs-voicevideo-in-a-split-dns-scenario/
• SQL Configuration
  • Using Lync Server 2010 with a Custom SQL Server Network Configuration: http://blogs.technet.com/b/nexthop/archive/2011/04/12/using-lync-server-2010-with-a-custom-sql-server-network-configuration.aspx
  • Microsoft Lync Server 2010 Enterprise Pool Local SQL Express (RTCLOCAL) Database Permissions: http://terenceluk.blogspot.com/2011/04/microsoft-lync-server-2010-enterprise.html
  • The Lync Server Databases: http://blog.insidelync.com/2011/04/the-lync-server-databases/
• Mediation server
  • Collocated Mediation Server vs. Dedicated Mediation Server: http://www.shudnow.net/2010/10/10/lync-2010-collocated-mediation-server-vs-dedicated-mediation-server/
  • Media Bypass with and without Voice Resilience: http://www.shudnow.net/2010/09/27/lync-2010-media-bypass-with-and-without-voice-resilience/
  • When to use the EnableReferSupport flag in LYNC CS 2010? http://blogs.technet.com/b/kamehta/archive/2011/01/06/when-to-use-the-enablerefersupport-flag-in-lync-cs-2010.aspx
• DNS Loadbalancing
  • DNS Load Balancing and Server Draining: http://blogs.technet.com/b/ucedsg/archive/2010/10/12/lync-dns-load-balancing-and-server-draining.aspx
• Response Groups
  • Creating a Response Group in Lync: http://blogs.technet.com/b/ilvancri/archive/2010/11/23/creating-a-response-group-in-lync.aspx
• Maintenance
  • SCOM / OpsMgr: Lync 2010 Management Pack – Deploying Synthetic transactions (STs): http://www.vnext.be/2011/03/06/scom-opsmgr-lync-2010-management-pack-deploying-synthetic-transactions-sts/
  • Lync Backup Instructions: http://blogs.technet.com/b/uc_mess/archive/2011/03/17/lync_2d00_server_2d00_2010_2d00_backup_2d00_instructions.aspx
  • Microsoft Lync Server 2010 Standard Edition Disaster Recovery Plan: http://blogs.technet.com/b/nexthop/archive/2011/09/29/microsoft-lync-server-2010-standard-edition-disaster-recovery-plan-part-1.aspx
  • Move Lync SQL Databases with a SQL Statement: http://aspoc.net/archives/2011/09/28/move-lync-sql-databases-with-a-sql-statement/
• Third Party integrations
  • IM an Expert Lync bot available for download and other Lync customization examples: http://blogs.technet.com/b/ucedsg/archive/2011/03/24/im-an-lync-expert-bot-available-for-download-and-other-lync-customization-examples.aspx
  • Streaming Video Content or Using Two Web Cams during a Lync Meeting using ManyCam: http://voipnorm.blogspot.com/2011/03/streaming-video-content-or-using-two.html
  • MP-114 pre-configured BOARD.INI for Lync 2010: http://www.lynclog.com/2011/04/mp-114-pre-configured-boardini-for-lync.html
  • User Provisioning App for AD, Lync and Exchange: http://gallery.technet.microsoft.com/Z-Hire-Employee-Provisionin-e4854d6b
  • Various Lync addons/customizations/extensions: http://www.codeplex.com/site/search?query=lync&ac=8
  • Third-Party Video Conferencing with Lync: http://blog.schertz.name/2011/10/lync-3rd-party-video-interop/
• Office 365 and UC
  • How to enable Lync On-Premise to Federate with Office365 Lync Online: http://techietom.co.uk/blog/2011/04/how-to-enable-office365-lync-online-to-federate-with-lync-on-prem/
  • Federation 101 in Lync Online: http://www.ultimate-communications.com/2011/07/federation-101-in-lync-online-office365-lync/
  • Configuring On-Premises Lync Server 2010 Integration with Exchange Online: http://blogs.technet.com/b/nexthop/archive/2011/06/28/configuring-on-premises-lync-server-2010-integration-with-exchange-online.aspx

When designing solutions for customers on Exchange Server 2010 I often get asked why they need archiving in the first place and is Exchange 2010 archiving good enough compared to Enterprise Information Archiving solutions such as Symantec Enterprise Vault. The answer is complicated, and it depends greatly on the customer needs and their users. To answer this you need to understand what Exchange archiving really is and how it differs from Enterprise Information Archiving. to answer this we look to Gartner.

Gartner has been publishing a Magic Quadrant for E-Mail Active Archiving since 2002 featuring products that does Enterprise level archiving of emails. They now see an increase in end-user demand of same type of archiving for additional content types such as files shares, Sharepoint and IM. That is the reason for Gartner in 2010 to release a new Magic Quadrant replacing the old. They now call it Enterprise Information Archiving. Vendors featured in this version need to be able to archive e-mail, file, Sharepoint and IM. Below is the latest Magic Quadrant for Enterprise Information Archiving (EIA):

We see in this quadrant that Symantec is a leader with its Enterprise Vault product. These are the key points for the reason of why EV is in the leader quadrant

• It’s a mature product with the largest worldwide base of enterprise customers
• It archives mail, Windows file systems, Sharepoint and IM
• Virtual Vault enables users to manage and view their archive data using a familiar GUI experience
• Tight integration with is backup products
• Enterprise level E-Discovery
• Support for Exchange 2010 SP1 and Microsoft BPOS

Microsoft Exchange Server 2010 is not part of the EIA Magic Quadrant. Gartner gives the following statement about why:

“Exchange 2010 archiving is a good choice for organizations that have never implemented archiving and are struggling with rapid, unmanageable growth of historical e-mail, or are looking for organizations that are looking to replace PST files with a more efficient and secure archiving capability. Because there is no support for files or other content types beyond e-mail, Microsoft’s archiving capabilities are not rated in this Magic Quadrant for EIA”

This is the essence of the Exchange Server 2010 archiving feature, it is an online PST archive with entry level archiving features. Knowing this, it boils down to the following questions:

1. When is Exchange 2010 archiving good enough?
2. When does the need for Enterprise Information Archiving like Symantec Enterprise Vault arise?

Koen Vermoesen has created a feature comparison between Exchange 2010 and Enterprise Vault in this article: http://blog.koenvermoesen.be/2010/06/03/symantec-enterprise-vault-vs-microsoft-exchange-server-archiving/

The feature Comparison between Exchange 2010 SP1 and Enterprise Vault 9.0 should be a good starting point to decide what solution to choose. I have updated it with some additional information. The conclusion in the feature comparison is noteworthy.

Background information

In Norway and Scandinavia it is normal for end users to have a mobile phone as work and private phone. A lot of companies in Norway have adopted mobile phone number as their primary phone numbers and can only be reached using this types of numbers. Traditionally the operators have offered their customers net centric logic for their call handling and switchboards and using only mobile phones as terminals. Since the users use the same phone at work and privately they only have their mobile number and the numbers follow the users and not the company. When we started deploying OCS 2007 R2 for these companies they wanted the solution to be built with using mobile phone numbers as primary number when calling from Communicator. Operators in Norway such as Telenor and Netcom are therefore offering IP Trunks that can integrate with OCS 2007 R2. With these IP Trunks they can rewrite the callers number from a PSTN number to mobile phone number before the call reaches the PSTN network and by that realizing single number reach. And when the called party calls back to the mobile phone number the OCS PSTN number is called at the same time using Dual Forking provided by the operator. This is how single number reach is realized when mobile phone is the main number and it works great. The end user do not have a clue what their real number in OCS is.

The Problem

If you throw Exchange UM into this mix with single number reach and mobile phone as primary number you get an issue. The integration itself works fine and as expected. The problem occurs when the users log off their computers and go to meetings, drive home or are generally not logged in. What happens is that when you are not logged in to Communicator and someone calls you. OCS will answer the call after under a second, ignoring the users call forwarding settings in Communicator,  and forward it to Exchange UM resulting in users loosing the call on the mobile phone. Exchange UM therefore breaks the solution. This is by design and we have not been able to implement Exchange UM in the UC mix in these scenarios until now.

Why Exchange Unified Messaging in conjunction with OCS

So why are we so eager to implement Exchange UM in these scenarios? When using the operators own net centric voice mail features we loose some technology and integration. By default the users get an SMS telling them they have a new message, and they can call in and hear the message. A lot of users set up their voice mail settings so that it sends an email with a wav file of the message to their inbox. After listening to the wav file and archive it or delete it, they still get the sms with the unheard message and there is no integration with their inbox and that they have already possessed it. Resulting that the SMS can tell them they have several unheard messages and that not being true. That is why we want to have Exchange UM deployed to have a complete UC solution.

Exchange UM has a couple of advantages to name a few:

• Integration with Exchange inbox, messages that are heard/read from Outlook, Outlook Web App or mobile phone through ActiveSync, are also read when calling the Exchange UM service
• Call back functionality directly for outlook Web App, you can have Exchange UM call you and play the message on the phone of your choosing
• Note field integrated in Outlook and Outlook Web App, gives you the ability take notes in outlook while listening to the message, save them and have them indexed
• You can call Exchange UM and rearrange you calendar, a good thing when you are late for a meeting and in a car travelling
• Read more about the Exchange UM server role here: http://technet.microsoft.com/en-us/library/bb125141.aspx

The solution

I have spent the most part of a year to find someone to help med with this. After some research I found out that it was possible to work around this using Front End Scripts and a program to put the call on hold for a given period of time. This summer I came in touch with a Scandinavian developer company called Competella. They develop application based on the UCMA (Unified Communications Managed API) and are currently developing an switchboard attendants that integrate call control with an advanced directory search tool, access to presence, calendar, e-mail and IM. The system adds attendant call control functionality to the Microsoft OCS beyond the level found in legacy PBXs. They developed a script and a program that checks the status of the user. If the user is offline it will put the call on hold for 20 seconds before forwarding it to the Exchange UM and by that solving the problem we have with single number reach using mobile phones and Exchange UM. This also works if the user has the status “in a mobile call” set by third party programs that get free/busy status from the operators on the users mobile phones.

Conclusion

By using the script and program from Competella we are now able to complete our UC deployments with Exchange UM when mobile phone is the primary number in a single number reach scenario. With this we can realise enterprise voice mail for mobile phones as well as OCS/Lync.

1. Open cmd
2. Type: nslookup
3. Type: set type=all
4. Type the SRV record to list its content

For OCS 2007 R2

• External
  • _sip._tls.domain.com
    • Usually points to Access EDGE FQDN on port 443 
  • _sipfederationtls._tcp.domain.com
    • Usually points to Access EDGE FQDN on port 5061
• Internal
  • _sipinternaltls._tcp.domain.com
    • Usually points to Pool name with correct sip domain on port 5061

For Exchange 2007/2010

• External autodiscover
  • _autodiscover._tcp.domain.com
    • Usually points to owa FQDN listener with NTLM negotiate on port 443

Problem: Receiving following error on Exchange 2010 server after opening EMC and expending Mailbox tab under organization configuration. An error caused a change in the current set of domain controllers. It was running command ‘Get-FederationTrust”

Possible causes:

To be honest first thing I checked was to make sure Exchange server is able to talk to all domain controllers as its configured on its TCP/IP properties.Also as always check to see anything catches your attention under application logs. Fair enough I was able to locate the event log “2080” MsExchangeADAccess” was showing me one DC only, however the TCP/IP stack was configured to talk to secondary DC.

Make sure Exchange is able to talk to all DC’s within its “Site”. Above example the second DC was not even discovered by MSExchange AD access, due to replication problems existed among the DC’s in the  site where exchange is residing. After fixing the relocation issues and restarting MSExchangeADTopology service took care of the error.

Note:

Some other people who had same error assumed to fix this issue by deleting the local profile ( corrupted profile) for the user account they logged into Exchange server. So if the above solution does not work, try this:

This error is actually a false error, and is caused by GUI caching, more specifically MMC caching. This occurs when a DC (domain controller) that is either unreachable or has changed in some way is still cached by the MMC applet. To fix this issue by removing the cache and basically resetting the MMC applet do this:

 Delete this file: “c:\users\<specific user>\appdata\roaming\microsoft\mmc\Exchange Management Console“

Source: http://trycatch.be/blogs/pdtit/archive/2010/02/04/an-error-caused-a-change-in-the-current-set-of-domain-controllers-exchange-2010.aspx

Here is the main new features in Exchange 2010 SP1 and how to configure them

• Installation of prerequisites made part of SP1 setup process
  • http://www.howexchangeworks.com/2010/06/installing-exchange-2010-pre-requisites.html
• DAG improvements
  • DAC mode support for 2 node DAG’s over two datacenters and in single AD sites
    • http://www.shudnow.net/2010/06/30/exchange-2010-database-activation-coordination-dac/
  • Ability to set static IP and Alternate Witness Server in EMC
    • http://www.howexchangeworks.com/2010/06/more-database-availability-group-dag.html
  • Continuous Replication – Block Mode. Each update to the log file is updated on the copy databases
    • http://blogs.technet.com/b/scottschnoll/archive/2010/04/10/new-high-availability-features-in-exchange-2010-sp1.aspx
• Archiving improvements
  • Archives can be stored in different databases, DAG’s and servers
    • http://www.shudnow.net/2010/04/07/exchange-2010-sp1-personal-archive-mailboxes-on-separate-databases/
  • Create retention policy tags for automating archiving
    • http://www.shudnow.net/2010/04/08/exchange-2010-sp1-retention-policies/
  • Outlook 2007 can access archive mailboxes
• Import and Export of mailboxes can be done directly to pst files without the need for Outlook
  • http://www.nitingupta.in/blogs/index.php/2010/06/16/how-to-import-pst-files-into-personal-archive-mailbox-in-exchange-2010-sp1-beta/
• E-Discovery improvements
  • View preview of search before actually performing the search
  • De-Duplication of emails in the search result sent to the DiscoveryMailbox
  • http://www.howexchangeworks.com/2010/06/mailbox-search-improvements-in-exchange.html
• Support for iCal Calendar Sharing
  • Enables the administrator to publish calendars publicly
  • http://www.stevieg.org/2010/06/calendar-sharing-improvements-coming-in-exchange-2010-sp1/
• Administrator Audit Logging improvements
  • Review Audit Log Entries in the Shell
  • Manually Write Entries to the Audit Log
  • Review Audit Reports in ECP
  • http://www.mikepfeiffer.net/2010/07/whats-new-in-administrator-audit-logging-in-exchange-2010-sp1-beta/
• OWA improvements
  • Ability to choose themes. Branding of OWA can be down with only one theme for the entire organization
    • http://www.howexchangeworks.com/2010/06/themes-are-back-in-exchange-2010-sp1.html
  • Delivery reports improvements
    • http://www.howexchangeworks.com/2010/06/delivery-reports-in-exchange-2010-sp1.html
• ECP, more configuration possibilities available
  • Journar rules
    • http://www.howexchangeworks.com/2010/06/transport-rules-in-exchange-2010-sp1.html
  • Transport rules
  • MailTips
  • Manage Litigation Hold
    • http://www.howexchangeworks.com/2010/06/litigation-hold-exposed-in-exchange.html
• Public Folder permissions added to EMC
  • http://www.howexchangeworks.com/2010/06/public-folder-permissions-added-to.htm

 Some minor changes in how to configure some features

• Change to how static ports are assigned on a CAS server
  • http://blogs.msexchange.org/walther/2010/06/09/exchange-2010-sp1-change-to-how-static-ports-are-assigned-on-a-cas-server/
• Reset virtual directories in EMC
  • http://www.howexchangeworks.com/2010/06/reset-virtual-directory-in-exchange.html
• Change to how to configure OWA integration with OCS 2007 R2
  • http://msunified.net/2010/06/22/exchange-2010-rtm-and-sp1-owa-integration-with-ocs-2007-r2/

You can find a longer list of new features here: http://exchangepedia.com/2010/06/released-exchange-sever-2010-sp1-beta.html
TechEd 2010 Interviews with folks from the Exchange Product group about SP1: http://blogs.msexchange.org/walther/2010/06/16/teched-2010-interviews-with-folks-from-the-exchange-product-group/

Prerequisites

1. Download and install OCS 2007 R2 Web Trust Tool on the Exchange 2010 server
   1. http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=ca107ab1-63c8-4c6a-816d-17961393d2b8 
   2. Locate and install the following files in elevated mode by running cmd.exe as administrator
      • vc_redistx64
      • UCMAredist.msi
      • CWAOWASSP.msi
2. If the Exchange 2010 server is running on Server 2008 R2 you also need to install the latest cumulative hotfix update for OCS 2007 R2 on the Exchange server
   1. http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b3b02475-150c-41fa-844a-c10a517040f4
   2. Download and run ServerUpdateInstaller.exe
   3. Also download the latest update for UCMAredist that is not included in CU5
      • http://support.microsoft.com/?kbid=982614
   4. Reboot the server

Configuring Exchange 2010 RTM

NOTE: The below steps need to be done on all Exchange 2010 CAS servers in you deployment

1. Download and run the PowerShell Script found in the below link
   1. http://msunified.net/exchange-downloads/script-imexintegration-ps1/
   2. The script will not configure anything
   3. It takes backup of web.conf and  generates the configuration you manually need to add the web.conf file
   4. The script makes it easy to generate the correct syntax for populating the below keys 
2. Navigate to the web.conf file
   1. C:\Program Files\Microsoft\Exchange Server\V14\ClientAccess\Owa\web.conf
   2. Edit the file and search for the string IMPoolName
   3. Replace the three “add key” strings with the ones provided with the script
3. In Exchange Management Shell run the following command to configure OWA Virtual Directory

   • Get-OwaVirtualDirectory -Server "CasServer" | Set-OwaVirtualDirectory -InstantMessagingType 1

     • NOTE: The RTM documentation states OCS, but that don’t work. Use 1 as InstantMessagingType
4. Run IISreset in PowerShell

Configuring Exchange 2010 SP1

The Exchange 2010 SP1 guide is based on this great post written by Martin Sundström: http://msundis.wordpress.com/2010/06/21/integrate-ocs-2007-r2-with-exchange-server-2010-sp1-owa/ The configuration on Exchange is now moved from web.conf to the per server OWA Virtual Directory. I will definitely create a script automating the below process when I get more hands on :)

NOTE: The below steps need to be done on all Exchange 2010 CAS servers in you deployment 

1. Get the active Exchange 2010 certificate using this command in Exchange Management Shell 

   • Get-ExchangeCertificate | Where-Object {$_.Services -match "IIS"} | Get-ExchangeCertificate | fl thumbprint,subject

     • This command gets the active certificate on the local server, because only one certificate can have IIS as service at a time
2. Use the thumbprint and OCS pool FQDN in the command below

   • Get-OwaVirtualDirectory -Server "CasServer" | Set-OwaVirtualDirectory -InstantMessagingCertificateThumbprint 4DC1EE3506E06E971FF82AC8DD60015EAC11B21E -InstantMessagingServerName ocspool01.domain.local -InstantMessagingType OCS -InstantMessagingEnabled $true

     • NOTE: This time we use OCS as InstantMessagingType
3. Run iisreset

Configuring OCS 2007 R2

In order to allow the Exchange 2010 server to communicate with OCS using SIP containing presence and chat you need to add every Exchange 2010 CAS servers as authorized hosts on OCS.

1. On your OCS R2 Pool server configure authorized host
   • NOTE: Your user needs to be member of the RTCUniversalServerAdmins group
2. Open Office Communications Server R2 under Administrative Tool
3. Expand forest and Enterprise pool or Standard Edition Servers depending on you deployment
4. Right click your pool and choose properties->Front End Properties
5. On the Hosts Authorization tab
6. You need to add the Client Access server FQDN and configure as the below image 
   • NOTE: This is the FQDN of your subject name (CN) on the certificate used on the CAS server

• On OCS Front End you need to install the same cumulative update as we installed on the Exchange server if you have not already done it
  1. http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=b3b02475-150c-41fa-844a-c10a517040f4
  2. Download and run ServerUpdateInstaller.exe
  3. NOTE: It is good practice to have all OCS servers on the same hotfix level
  4. Reboot the server

Troubleshooting the Installation (RTM)

Next are a few troubleshooting steps that can assist with some of the more common problems encountered with Exchange/OCS integration. I found these valid troubleshooting steps on Rand Morimoto’s post: http://www.networkworld.com/community/node/47348

Configuring the Firewall on the CAS Server

If the Client Access Server has the Windows Firewall enabled, it might need an exception to enable OCS 2007 R2 to communicate with it. To create the exception, perform the following steps:

1. From the Control Panel, open Windows Firewall 
2. On the left side of the Windows Firewall window, click .“Allow a Program Through Windows Firewall.
3. Click Add Program; then click Browse.
4. Browse to C:\Windows\System32\inetsrv and select w3wp.exe.
5. Click Open and then click OK twice to apply changes and close the window. Be sure to perform this step on all CAS servers with IM integration enabled.

User Configuration

• Before the user community can utilize the IM features, they must be “provisioned” for Office Communications Server R2 and must be enabled for Enhance Presence. When the user is initially enabled on OCS 2007 R2, he will automatically be enabled for Enhanced Presence.
• Users must also have a valid SIP proxy address for the OWA IM integration component to enable the IM Integration UI.
• When attempting to view the Instant Messaging contact list, a user might receive a notification that states
  • Instant Messaging Isn’t Available Right Now. The Contact List Will Appear When the Service Becomes Available.
• If this occurs, perform the following steps:
  1. Using the same user account, confirm that you can access the IM services using the Office Communicator 2007 R2 client.
  2. If functional, confirm that the OCS Server name is properly entered in the Web.Config file of the CAS server.
  3. Also confirm the configuration of the Authorized Hosts option on the OCS pool contains all IM Integrated Client Access Servers.

OWA Certificate Error

If OWA cannot locate the certificate, an error stating The Local Certificate Specified Was Not Found in the Store for the Local Computer appears.

In this case, confirm that the value of the OCSCertificateIssuer and OCSCertificateSerialNumber fields in the Web.Config file are correct. Also ensure that there are blank spaces between every two characters in the serial number to separate octets in the string.

References

TechNet: http://technet.microsoft.com/en-us/library/ee633458%28EXCHG.140%29.aspx
Chris and Robin’s Technology blog: http://chrislehr.com/2009/11/implementing-integrated-ocs-in-owa-2010.htm
Martin Sundström: http://msundis.wordpress.com/2010/06/21/integrate-ocs-2007-r2-with-exchange-server-2010-sp1-owa/
Rand Morimoto: http://www.networkworld.com/community/node/47348

This script may come in handy in the following scenarios:

• Initial configuration, avoid typos
• Expansion in the infrastructure with load balanced CAS
• Change in internal FQDN if you change certificate name
• When you have a total disaster on site 1 and need to fail over to a second site with a passive DAG server that holds all server roles

Please keep in mind:

• The Script is developed for Exchange 2003 coexistence and migration scenarios
• The script must not be run in an Exchange 2007 coexistence and migration scenario
• For InternalURL the script will look for a CASArray (It is recommended to create a CASArray in any scenario)
• The script assumes there is only one ADsite

About the script:

• First you will be presented with som choices on what to do
• InternalURL will autoconfigure based on CASArray
• ExternalURL will prompt for public FQDN and assume one external address
  • Will use same FQDN for OWA, ActiveSync, Autodiscover and so on
• Will prompt for Exchange 2003 URL
• All configuration will output the changes made

Update 27.05.2010:

• Added support for Exchange 2007 and Exchange 2007/2010 coexistence scenarios.
• The script will check for Exchange version before applying any settings.
• When applying Exchange 2010 Internal URL the script will match the CAS servers to the correct CASarray in the correct ADsite

Update 28.05.2010

• Added option for checking current configuration
• Corrected some errors on the Exchange 2007 configuration and listing of URLs
• Tested in Exchange 2007 only deployments and Exchange 2010 and 2007 coexistence deployments

 The Script can be viewed and downloaded here: http://msunified.net/exchange-downloads/script-internalexternalurls-ps1/