<?xml version="1.0" encoding="utf-8"?>
<rss xmlns:atom="https://www.w3.org/2005/Atom" xmlns:sy="https://purl.org/rss/1.0/modules/syndication/" xmlns:dc="https://purl.org/dc/elements/1.1/" xmlns:content="https://purl.org/rss/1.0/modules/content/" xmlns:wfw="https://wellformedweb.org/CommentAPI/" xmlns:slash="https://purl.org/rss/1.0/modules/slash/"
  version="2.0">
  <channel>
    <title>Doug Deitterick's Blog</title>
    <atom:link
      href="https://docs.microsoft.com/archive/blogs/dodeitte/feed.xml"
      rel="self"
      type="application/rss+xml" />
    <link>https://docs.microsoft.com/archive/blogs/dodeitte/feed.xml</link>
    <description>Information about Teams, Skype for Business, Lync, OCS, and Exchange UM.</description>
    <lastBuildDate>Wed, 03 Oct 2018 01:21:55 GMT</lastBuildDate>
    <language>en-US</language>
    <sy:updatePeriod>hourly</sy:updatePeriod>
    <sy:updateFrequency>1</sy:updateFrequency>
    <item>
      <title>Live Meeting Service End of Life</title>
      <link>https://docs.microsoft.com/archive/blogs/dodeitte/live-meeting-service-end-of-life</link>
      <pubDate>Fri, 15 Dec 2017 10:28:32 GMT</pubDate>
      <dc:creator><![CDATA[dodeitte]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/dodeitte/?p=2685</guid>
      <description><![CDATA[If your company is using Office Live Meeting, we have some important reminders for you.

We’ve...]]></description>
      <content:encoded><![CDATA[If your company is using <strong>Office Live Meeting</strong>, we have some important reminders for you.

We’ve been working hard to get <strong>Skype for Business</strong> and <strong>Skype Meeting Broadcast</strong> ready with new conversation and meeting features, so we’re inviting you to begin the migration from Live Meeting to Skype for Business. We encourage you to begin the move from Live Meeting to Skype for Business as quickly as possible, completing the migration no later than <strong>December 31, 2017</strong>, at which time the existing Live Meeting service will be fully shut down.

Skype for Business provides many advantages over Live Meeting, including:
<ul>
 	<li>Increased scale, with up to 10,000 attendees in a Skype Meeting Broadcast</li>
 	<li>Support for participating in meetings from iOS, Android, and other mobile devices</li>
 	<li>Better quality, with HD video and video based screen sharing</li>
 	<li>And more… (see the complete comparison below)</li>
</ul>
If you are a meeting organizer…

You should begin scheduling your upcoming meetings in Office 365 and Skype for Business, but meetings you’ve already scheduled will work as planned through final shutdown date on <strong>December 31, 2017</strong>. To help you with this transition, we’ve created some training and guides for you which can be found here <a href="https://www.microsoft.com/en-us/download/details.aspx?id=54097">Live Meeting to Skype for Business resource site</a>.

<strong>NEW!</strong> To help manage your Live Meeting recordings, we also have a <strong>Recording Exporter Tool</strong> available. This tool can be used to download any or all of your existing meeting recordings saved in the Live Meeting service. The tool can be downloaded here: <a href="https://aka.ms/livemeeting/recordingtool">https://aka.ms/livemeeting/recordingtool</a>.

If you are an IT professional or admin…

You play an important role in helping your users have a successful migration. We have created a toolkit to enable you to help your users make this important migration. Here, you can find additional guidance, a step-by-step guide for planning your transition and other tools in the <a href="https://www.microsoft.com/en-us/download/details.aspx?id=54097">Live Meeting to Skype for Business resource site</a>. In addition, <a href="https://fasttrack.microsoft.com/#/office">Microsoft's FastTrack Center</a> provides useful resources and help for customers adopting Office 365.

Complete functional comparison:

<a href="https://msdnshared.blob.core.windows.net/media/2017/12/2017_12_15_01-01.png"><img width="600" height="582" class="alignnone size-full wp-image-2695" alt="" src="https://msdnshared.blob.core.windows.net/media/2017/12/2017_12_15_01-01.png" /></a>]]></content:encoded>
    </item>
    <item>
      <title>Issue Installing Prerequisites on a Server with KB2966828</title>
      <link>https://docs.microsoft.com/archive/blogs/dodeitte/issue-installing-prerequisites-on-a-server-with-kb2966828</link>
      <pubDate>Mon, 06 Mar 2017 14:26:53 GMT</pubDate>
      <dc:creator><![CDATA[dodeitte]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/dodeitte/?p=2595</guid>
      <description><![CDATA[This has been an issue for awhile now, but not normally something I run into as most of my installs...]]></description>
      <content:encoded><![CDATA[This has been an issue for awhile now, but not normally something I run into as most of my installs start with an unpatched base install of Windows.  In this case, the image we used had patches already applied.  When trying to install the prerequisites, we would get the following error:

<a href="https://msdnshared.blob.core.windows.net/media/2017/03/2017_03_06_02-02.png"><img width="877" height="643" class="alignnone size-full wp-image-2665" alt="2017_03_06_02-02" src="https://msdnshared.blob.core.windows.net/media/2017/03/2017_03_06_02-02.png" /></a>

Add-WindowsFeature : The request to add or remove features on the specified server failed.
Installation of one or more roles, role services, or features failed.
The source files could not be downloaded.
Use the "source" option to specify the location of the files that are required to restore the feature. For more
information on specifying a source location, see https://go.microsoft.com/fwlink/?LinkId=243077. Error: 0x800f0906

This can be caused by not specifying the -Source parameter for the Windows Server 2012 R2 installation media, as I've posted about <a href="https://blogs.technet.microsoft.com/dodeitte/2015/05/04/installing-prerequisites-for-skype-for-business-server-2015/">here</a>.  However, this isn't our issue, as I specified the -Source parameter.  In this instance, the issue is because KB2966828 has been applied to the server:

<a href="https://msdnshared.blob.core.windows.net/media/2017/03/2017_03_06_02-01.png"><img width="877" height="331" class="alignnone size-full wp-image-2656" alt="2017_03_06_02-01" src="https://msdnshared.blob.core.windows.net/media/2017/03/2017_03_06_02-01.png" /></a>

This issue is documented <a href="https://support.microsoft.com/en-us/help/3002547/you-cannot-enable-the-microsoft-.net-framework-3.5-feature-on-windows-server-2012-r2,-windows-server-2012,-windows-8.1,-or-windows-8-after-you-install-security-update-2966827-or-2966828">here</a>.

<em>Security updates 2966827 and 2966828 (described in Microsoft Security Bulletin MS14-046) for the .NET Framework 3.5 require metadata that is added to the system only when the Microsoft .NET Framework 3.5 feature is enabled. Updates that apply to the .NET Framework 3.5 are meant to be installed only after the .NET Framework 3.5 feature is installed.</em>

The fix is to apply <a href="https://support.microsoft.com/en-us/help/3005628/update-for-the-.net-framework-3.5-on-windows-8,-windows-8.1,-windows-server-2012,-and-windows-server-2012-r2">KB3005628</a>.  Once we applied the fix, we were able to install the prerequisites successfully:

<a href="https://msdnshared.blob.core.windows.net/media/2017/03/2017_03_06_02-03.png"><img width="877" height="643" class="alignnone size-full wp-image-2675" alt="2017_03_06_02-03" src="https://msdnshared.blob.core.windows.net/media/2017/03/2017_03_06_02-03.png" /></a>

&nbsp;]]></content:encoded>
    </item>
    <item>
      <title>Issue with CMS Replication in a Hardened Environment</title>
      <link>https://docs.microsoft.com/archive/blogs/dodeitte/issue-with-cms-replication-in-a-hardened-environment</link>
      <pubDate>Mon, 06 Mar 2017 11:18:16 GMT</pubDate>
      <dc:creator><![CDATA[dodeitte]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/dodeitte/?p=2525</guid>
      <description><![CDATA[This was an interesting issue I ran into recently at a customer.  They were migrating to Skype for...]]></description>
      <content:encoded><![CDATA[This was an interesting issue I ran into recently at a customer.  They were migrating to Skype for Business Server 2015 from Lync Server 2013.  They were having issues with CMS replication to the new Skype for Business Front End Servers.  With the CMS hosted on the Lync Server 2013 Front End, none of the Skype for Business Front Ends would replicate.  We moved the CMS to the Skype for Business Front End and it was able to replicate with the Lync Server 2013 Front End and itself, but not the other Skype for Business Front End:

<a href="https://msdnshared.blob.core.windows.net/media/2017/03/2017_03_06_01-04.png"><img width="877" height="643" class="alignnone size-full wp-image-2645" alt="2017_03_06_01-04" src="https://msdnshared.blob.core.windows.net/media/2017/03/2017_03_06_01-04.png" /></a>

We knew that the issue was related to a GPO that was being pushed to the new Skype for Business servers, because when we put the servers in an OU without any GPOs, the issues went away.  After reviewing the assigned GPOs we found the setting causing the issue.  In the Local Security Policy &gt; Local Policies &gt; User Rights Assignment &gt; Access this computer from the network, they had removed everything except the Administrators group:

<a href="https://msdnshared.blob.core.windows.net/media/2017/03/2017_03_06_01-03.png"><img width="800" height="572" class="alignnone size-full wp-image-2635" alt="2017_03_06_01-03" src="https://msdnshared.blob.core.windows.net/media/2017/03/2017_03_06_01-03.png" /></a>

<a href="https://msdnshared.blob.core.windows.net/media/2017/03/2017_03_06_01-02.png"><img width="431" height="514" class="alignnone size-full wp-image-2615" alt="2017_03_06_01-02" src="https://msdnshared.blob.core.windows.net/media/2017/03/2017_03_06_01-02.png" /></a>

This caused replication to break to the other Skype for Business servers, because Network Service wasn't able to connect to the Front Ends anymore to replicate the CMS changes.  You may or may not see any errors in the Event Log about this:

<a href="https://msdnshared.blob.core.windows.net/media/2017/03/2017_03_06_01-05.png"><img width="640" height="445" class="alignnone size-full wp-image-2655" alt="2017_03_06_01-05" src="https://msdnshared.blob.core.windows.net/media/2017/03/2017_03_06_01-05.png" /></a>

Log Name:      Lync Server
Source:        LS File Transfer Agent Service
Date:          3/6/2017 9:37:54 AM
Event ID:      1017
Task Category: (1121)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      LAB0-S4B-SE1.lab0.deitterick.com
Description:
File transfer failed for some replica machines. Skype for Business Server 2015, File Transfer Agent will continuously attempt to replicate to these machines.

While this condition persists, configuration changes will not be delivered to these replica machines.
Replica file transfer failures:
LAB0-S4B-SE2.lab0.deitterick.com: Access failed. (Can't watch \\LAB0-S4B-SE2.lab0.deitterick.com\xds-replica\to-master.)
First Observed: 3/6/2017 9:29:32 AM Details: System.ComponentModel.Win32Exception (0x80004005): The specified network name is no longer available

LAB0-S4B-SE2.lab0.deitterick.com: Access failed. (\\LAB0-S4B-SE2.lab0.deitterick.com\xds-replica\from-master\data.zip)
First Observed: 3/6/2017 9:30:23 AM Details: System.IO.IOException: Logon failure: the user has not been granted the requested logon type at this computer.

at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
at System.IO.File.InternalDelete(String path, Boolean checkHost)
at Microsoft.Rtc.Xds.Replication.FileTransfer.FileTransferTask.CopyFiles(String fromDir, String toDir)
Dependent Machines: ALL : LAB0-S4B-SE2.lab0.deitterick.com
Cause: Possible issues with transferring files to the replicas listed above.
Resolution:
Check the accessibility of file shares or https web services listed above.

&nbsp;

Once we added the normal groups back:

<a href="https://msdnshared.blob.core.windows.net/media/2017/03/2017_03_06_01-01.png"><img width="431" height="514" class="alignnone size-full wp-image-2605" alt="2017_03_06_01-01" src="https://msdnshared.blob.core.windows.net/media/2017/03/2017_03_06_01-01.png" /></a>

Replication started working again:<a href="https://msdnshared.blob.core.windows.net/media/2017/03/02017_03_06_01-02.png"></a>

<a href="https://msdnshared.blob.core.windows.net/media/2017/03/2017_03_06_01-06.png"><img width="877" height="643" class="alignnone size-full wp-image-2625" alt="2017_03_06_01-06" src="https://msdnshared.blob.core.windows.net/media/2017/03/2017_03_06_01-06.png" /></a>

&nbsp;]]></content:encoded>
    </item>
    <item>
      <title>Skype for Business Basic Client &amp; Updates</title>
      <link>https://docs.microsoft.com/archive/blogs/dodeitte/skype-for-business-basic-client-updates</link>
      <pubDate>Fri, 15 Jul 2016 00:10:38 GMT</pubDate>
      <dc:creator><![CDATA[dodeitte]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/dodeitte/?p=2485</guid>
      <description><![CDATA[Starting with the July 5, 2016, update for Skype for Business 2016 (KB3115268), the Skype for...]]></description>
      <content:encoded><![CDATA[Starting with the <a href="https://support.microsoft.com/en-us/kb/3115268">July 5, 2016, update for Skype for Business 2016 (KB3115268)</a>, the Skype for Business Basic 2016 client can now be updated using the regular Skype for Business 2016 client updates.

Customers will require the <a href="https://www.microsoft.com/en-us/download/details.aspx?id=49440">April 2016 Skype for Business Basic 2016</a> (16.0.4351.1001) client update in order to take advantage of this new functionality. This means that you can download the Skype for Business 2016 client updates and they will also apply to the Skype for Business Basic 2016 client.

&nbsp;

<strong>Microsoft Skype for Business Basic </strong>gives you presence, instant messaging (IM), audio and video calls, online meetings, and sharing capabilities with the latest User Interface.. This is free download. For more information about features available in Skype for Business Basic in comparison to the Skype for Business client, please visit this page: <a href="https://technet.microsoft.com/en-us/library/dn933896.aspx">Skype for Business client comparison chart</a>

<b>Note:</b> This Skype for Business Basic MSI desktop client provides presence, instant messaging and conferencing features. If you are licensed for Office 365 ProPlus, Office 365 Enterprise E3 or Office 365 Enterprise E4, you are also licensed for the full Skype for Business Windows desktop client, which includes additional features including advanced telephony support, archiving &amp; compliance features. Please download full Skype for Business Windows desktop client from the <a href="https://go.microsoft.com/fwlink/p/?LinkID=511638">Office 365 Software portal</a> following the steps in <a href="https://support.office.com/en-us/article/Install-Skype-for-Business-on-your-PC-8a0d4da8-9d58-44f9-9759-5c8f340cb3fb">Install Skype for Business on your PC</a>.]]></content:encoded>
    </item>
    <item>
      <title>Skype for Business Server Real-Time Statistics Manager 1.1 Available</title>
      <link>https://docs.microsoft.com/archive/blogs/dodeitte/skype-for-business-server-real-time-statistics-manager-1-1-available</link>
      <pubDate>Mon, 25 Apr 2016 22:52:41 GMT</pubDate>
      <dc:creator><![CDATA[dodeitte]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/dodeitte/?p=2475</guid>
      <description><![CDATA[An update to Skype for Business Server Real-Time Statistics Manager is available. The following...]]></description>
      <content:encoded><![CDATA[An update to Skype for Business Server Real-Time Statistics Manager is available. The following known issues have been fixed in release 1.1:
<ul>
	<li>UI/Server/Agent - Numerous significant reliability and performance improvements</li>
	<li>UI - Main filter control now sorts correctly with different cases (was leading people to think certain servers weren’t in the system when they were)</li>
	<li>Server - Server components will now install on non-English servers.</li>
	<li>Server/Agent - In some cases, agent and server components would not install with .NET errors due to a specific version of .NET 4.0. This has been resolved.</li>
	<li>Agent – Extended event logging added for the StatsMan Agent. The agent will no longer crash when installed on a server not in the topology, this will now be logged in the event log, along with many other possible error conditions.</li>
	<li>UI - Web clients using the Chrome browser would see multiple login prompts when using a client computer not joined to the same workgroup or domain as the Statistics Manager Web server. Now only a single login should be required per session.</li>
</ul>
&nbsp;

You can download the update <a href="https://www.microsoft.com/en-us/download/details.aspx?id=49491" target="_blank">here</a> and get information on installing/upgrading <a href="https://blogs.technet.microsoft.com/dodeitte/2015/10/24/skype-for-business-server-real-time-statistics-manager/" target="_blank">here</a>.

&nbsp;]]></content:encoded>
    </item>
    <item>
      <title>Last Cumulative Update for Lync Server 2010 Available</title>
      <link>https://docs.microsoft.com/archive/blogs/dodeitte/last-cumulative-update-for-lync-server-2010-available</link>
      <pubDate>Tue, 19 Apr 2016 22:25:58 GMT</pubDate>
      <dc:creator><![CDATA[dodeitte]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/dodeitte/?p=2445</guid>
      <description><![CDATA[This will mark the last Cumulative Update for Lync Server 2010 as we are at the end of the 5 year...]]></description>
      <content:encoded><![CDATA[This will mark the <strong>last</strong> Cumulative Update for Lync Server 2010 as we are at the end of the 5 year main-stream support. This also means it is the start of extended support (end 4/13/2021). During the extended support period, we no longer provide Cumulative Update or hotfixes but still provide security fixes for the next 5 years. For more information about Microsoft software lifecycle, please visit the following link <a href="https://support.microsoft.com/en-us/lifecycle?p1=14934" target="_blank">here</a>.

To get the Lync Server 2010, April 2016 Cumulative Update, go to the following:
<ul>
	<li>Bits are available from the Microsoft Download Center <a href="https://www.microsoft.com/downloads/details.aspx?FamilyId=796480cd-daf4-4463-b418-7391cc46a5e1" target="_blank">here</a>.</li>
	<li>Documentation is available <a href="https://support.microsoft.com/en-us/kb/2493736" target="_blank">here</a>.</li>
</ul>]]></content:encoded>
    </item>
    <item>
      <title>.NET Framework 4.6.1 and Skype for Business Server 2015/Lync Server 2013</title>
      <link>https://docs.microsoft.com/archive/blogs/dodeitte/net-framework-4-6-1-and-skype-for-business-server-2015lync-server-2013</link>
      <pubDate>Fri, 12 Feb 2016 12:43:00 GMT</pubDate>
      <dc:creator><![CDATA[dodeitte]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/dodeitte/2016/02/12/net-framework-4-6-1-and-skype-for-business-server-2015lync-server-2013/</guid>
      <description><![CDATA[Update 2/13/17 - .NET Framework 4.6.2 is supported with the February 2017 Cumulative Update for...]]></description>
      <content:encoded><![CDATA[<span style="color: #ff0000">Update 2/13/17 - .NET Framework 4.6.2 is supported with the February 2017 Cumulative Update for Skype for Business Server 2015.</span>
<p>Be aware that the Skype Product Group has recommended that customers hold off on installing .NET Framework 4.6.1 on their Skype for Business Server 2015 and Lync Server 2013 servers.&nbsp; You can follow the <a href="https://support.microsoft.com/en-us/kb/3133990">How to temporarily block the installation of the .NET Framework 4.6.1</a> KB article to block in installation of .NET 4.6.1.</p>
<p>More information is available <a href="https://blogs.technet.microsoft.com/nexthop/2016/02/11/on-net-framework-4-6-1-and-skype-for-businesslync-server-compatibility/">here</a>.</p>]]></content:encoded>
    </item>
    <item>
      <title>How to Setup Shared Line Appearance in Skype for Business Server 2015</title>
      <link>https://docs.microsoft.com/archive/blogs/dodeitte/how-to-setup-shared-line-appearance-in-skype-for-business-server-2015</link>
      <pubDate>Sun, 29 Nov 2015 02:12:00 GMT</pubDate>
      <dc:creator><![CDATA[dodeitte]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/dodeitte/2015/11/29/how-to-setup-shared-line-appearance-in-skype-for-business-server-2015/</guid>
      <description><![CDATA[Update 3/6/16 - Updated&nbsp;list of supported Polycom phones.
Shared Line Appearance (SLA) is a...]]></description>
      <content:encoded><![CDATA[<p><span style="color:#ff0000;"><span style="color:#ff0000;"><span style="color:#ff0000;"><span style="color:#ff0000;">Update 3/6/16 - Updated&nbsp;list of supported Polycom phones</span></span></span></span>.</p>
<p>Shared Line Appearance (SLA) is a new feature in the Skype for Business Server November 2015 Cumulative Update.&nbsp; To enable this feature, you must have first deployed this cumulative update.&nbsp; You can download the latest Skype for Business Server 2015 Cumulative Update <a href="https://support.microsoft.com/en-us/kb/3061064">here</a>.&nbsp; There are also two TechNet articles, <a href="https://technet.microsoft.com/EN-US/library/mt612810.aspx">Plan for Shared Line Appearance in Skype for Business Server 2015</a> and <a href="https://technet.microsoft.com/EN-US/library/mt612811.aspx">Deploy Shared Line Appearance in Skype for Business Server 2015</a>, that provide additional information.&nbsp; Shared Line Appearance is configured via PowerShell using the following cmdlets:</p>
<ul>
<li><a href="https://technet.microsoft.com/EN-US/library/mt588433.aspx">Set-CsSlaConfiguration</a></li>
<li><a href="https://technet.microsoft.com/EN-US/library/mt588431.aspx">Remove-CsSlaDelegates</a></li>
<li><a href="https://technet.microsoft.com/EN-US/library/mt588430.aspx">Get-CsSlaConfiguration</a></li>
<li><a href="https://technet.microsoft.com/EN-US/library/mt588435.aspx">Add-CsSlaDelegates</a></li>
<li><a href="https://technet.microsoft.com/EN-US/library/mt588432.aspx">Remove-CsSlaConfiguration</a></li>
</ul>
<p>Shared Line Appearance enables you to configure a group of multiple devices that can each answer calls to a shared phone number (extension). &nbsp;SLA is supported only on the following phone devices (it is not supported for Skype for Business clients on computers, mobile phones, or other devices):</p>
<p><strong>Polycom</strong> (with firmware update 5.4.1)</p>
<ul>
<li>VVX201</li>
<li>VVX300/301</li>
<li>VVX310/311</li>
<li>VVX400/401</li>
<li>VVX410/411</li>
<li>VVX500/501</li>
<li>VVX600/601</li>
</ul>
<p>Setting up an SLA group enables the following:</p>
<ul>
<li>All delegates in the group can answer inbound calls to the same shared number.&nbsp; The calls can be PSTN-based or SIP-based.</li>
<li>Delegates can hold and pick up calls.</li>
<li>Delegates can transfer calls to a number outside of the SLA group.</li>
<li>Delegates can see how many calls are currently on the shared number, and view the status of each of those calls.</li>
<li>You can configure a maximum number of concurrent calls for the shared number. &nbsp;You can also set how you want additional calls to be handled after this maximum is reached.&nbsp; Excess calls can be rejected with a busy signal, forwarded to an alternate number, or forwarded to voice mail.</li>
<li>You can configure how you want missed calls (calls not picked up after a certain time) to be handled.&nbsp; If you enable voice mail for the group identity, missed calls automatically go to voice mail.&nbsp; If you do not have voice mail enabled for the group identity (shared number), you can choose for missed calls to be rejected with a busy signal, forwarded to an alternate number, or disconnected.</li>
</ul>
<p><strong>Enabling&nbsp;Shared Line Appearance</strong></p>
<p>After installing the Skype for Business Server November 2015 Cumulative Update the installer will have deployed the latest version of the SLA application, however, the application is not enabled by default.&nbsp; You will need to&nbsp;enable it by following the steps outlined below:</p>
<p>Register SLA as a server application by running the following command for each pool:</p>
<p><strong>New-CsServerApplication -Identity &#39;Service:Registrar:%FQDN%/SharedLineAppearance&#39; -Uri https://www.microsoft.com/LCS/SharedLineAppearance&nbsp; -Critical $false -Enabled $true -Priority (Get-CsServerApplication -Identity &#39;Service:Registrar:%FQDN%/UserServices&#39;).Priority</strong></p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_02-01.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_02_2D00_01.png"><img alt=" " src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_02-01.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_02_2D00_01.png" border="0" /></a><br /><span style="font-size:x-small;"><strong>Note</strong>: You may need to click on the image above in order to read the text.</span></p>
<p>Next, run&nbsp;<strong>Update-CsAdminRole</strong> to update the RBAC roles for the SLA cmdlets:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_02-02.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_02_2D00_02.png"><img alt=" " src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_02-02.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_02_2D00_02.png" border="0" /></a><br /><span style="font-size:x-small;"><strong>Note</strong>: You may need to click on the image above in order to read the text.</span></p>
<p>Restart all the Front End Servers (RTCSRV service) in all the pools where SLA was installed and enabled:</p>
<p><strong>Stop-CsWindowsService RTCSRV</strong></p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_02-03.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_02_2D00_03.png"><img alt=" " src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_02-03.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_02_2D00_03.png" border="0" /></a><br /><span style="font-size:x-small;"><strong>Note</strong>: You may need to click on the image above in order to read the text.</span></p>
<p><strong>Start-CsWindowsService RTCSRV</strong></p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_02-04.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_02_2D00_04.png"><img alt=" " src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_02-04.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_02_2D00_04.png" border="0" /></a><br /><span style="font-size:x-small;"><strong>Note</strong>: You may need to click on the image above in order to read the text.</span></p>
<p>Now that SLA is enabled, you will need to create an SLA group and add users to it.&nbsp; Create the SLA group by using the Set-CsSlaConfiguration cmdlet:</p>
<p><strong>Set-CsSlaConfiguration -Identity &lt;IdentityOfGroup&gt; -MaxNumberOfCalls &lt;Number&gt; -BusyOption &lt;BusyOnBusy|Voicemail|Forward&gt; [-Target &lt;TargetUserOrPhoneNumber&gt;]</strong></p>
<p><strong>Note:</strong>&nbsp;What you specify for Identity must be a valid Enterprise Voice-enabled user.</p>
<p>In this example I created an AD user called MainOfficeSLA, enabled it for Skype for Business, enabled it for Enterprise Voice, and assigned it a phone number.</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_02-05.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_02_2D00_05.png"><img alt=" " src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_02-05.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_02_2D00_05.png" border="0" /></a><br /><span style="font-size:x-small;"><strong>Note</strong>: You may need to click on the image above in order to read the text.</span></p>
<p>Next, add delegates to the group.&nbsp; These are the users that will receive notification of an incoming call to the Main Office number:</p>
<p><strong>Note:</strong> Each user added to the group must be a valid Enterprise Voice-enabled user.&nbsp; You can add delegates that aren&#39;t homed on a Skype for Business Server 2015 pool.</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_02-06.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_02_2D00_06.png"><img alt=" " src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_02-06.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_02_2D00_06.png" border="0" /></a></p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_02-07.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_02_2D00_07.png"><img alt=" " src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_02-07.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_02_2D00_07.png" border="0" /></a><br /><span style="font-size:x-small;"><strong>Note</strong>: You may need to click on the images above in order to read the text.</span></p>
<p>Once a user is added as a delegate, you can see below that two lines show up on the user&#39;s phone (VVX 500):</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_02-08.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_02_2D00_08.png"><img alt=" " src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_02-08.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_02_2D00_08.png" border="0" /></a></p>
<p>I only see two lines because when I created the SLA, I specified the &quot;Maximum Number of Allowed Calls&quot; to 2.&nbsp; From the user&#39;s Lync/Skype for Business&nbsp;client, even though SLA is not supported for Lync/Skype for Business clients on computers, the user is notified that they were added as a delegate for the SLA group:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_02-09.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_02_2D00_09.png"><img alt=" " src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_02-09.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_02_2D00_09.png" border="0" /></a></p>
<p>When a call comes in to the SLA group and is picked up by another user, you can tell by the red bar that is shown for that particular line.&nbsp; In the example below, there is a call on 01-Main Office:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_02-10.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_02_2D00_10.png"><img alt=" " src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_02-10.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_02_2D00_10.png" border="0" /></a></p>
<p>The user that took the call, can then place it on hold:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_02-11.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_02_2D00_11.png"><img alt=" " src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_02-11.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_02_2D00_11.png" border="0" /></a></p>
<p>Other users could see that the call on that line is on hold by the flashing red bar.&nbsp; They could then pick up the call by selecting that line on their phone.</p>]]></content:encoded>
    </item>
    <item>
      <title>New Skype for Business Server 2015 PowerShell Cmdlets Not Available After Applying November 2015 CU</title>
      <link>https://docs.microsoft.com/archive/blogs/dodeitte/new-skype-for-business-server-2015-powershell-cmdlets-not-available-after-applying-november-2015-cu</link>
      <pubDate>Sat, 28 Nov 2015 08:52:00 GMT</pubDate>
      <dc:creator><![CDATA[dodeitte]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/dodeitte/2015/11/28/new-skype-for-business-server-2015-powershell-cmdlets-not-available-after-applying-november-2015-cu/</guid>
      <description><![CDATA[After applying the Skype for Business Server 2015 November 2015 Cumulative Update, some additional...]]></description>
      <content:encoded><![CDATA[<p>After applying the Skype for Business Server 2015 November 2015 Cumulative Update, some additional PowerShell cmdlets are available:</p>
<ul>
<li><a href="https://technet.microsoft.com/EN-US/library/mt588435.aspx">Add-CsSlaDelegates</a></li>
<li><a href="https://technet.microsoft.com/EN-US/library/mt588431.aspx">Remove-CsSlaDelegates</a></li>
<li><a href="https://technet.microsoft.com/EN-US/library/mt588430.aspx">Get-CsSlaConfiguration</a></li>
<li><a href="https://technet.microsoft.com/EN-US/library/mt588433.aspx">Set-CsSlaConfiguration</a></li>
<li><a href="https://technet.microsoft.com/EN-US/library/mt588432.aspx">Remove-CsSlaConfiguration</a></li>
<li><a href="https://technet.microsoft.com/EN-US/library/mt629175.aspx">New-CsGroupPickupUserOrbit</a></li>
<li><a href="https://technet.microsoft.com/EN-US/library/mt629176.aspx">Get-CsGroupPickupUserOrbit</a></li>
<li><a href="https://technet.microsoft.com/EN-US/library/mt629174.aspx">Set-CsGroupPickupUserOrbit</a></li>
<li><a href="https://technet.microsoft.com/EN-US/library/mt629177.aspx">Remove-CsGroupPickupUserOrbit</a></li>
<li>Reset-CsNotificationQueues</li>
<li>Get-CsServerPatchVersion</li>
</ul>
<p>However, if you&nbsp;use Windows Powershell instead of the Skype for Business Management Shell to manage your Skype for Business environment, you may find that several new cmdlets are not immediately available in Windows Powershell instances after installing the November 2015 CU:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_01-01.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_01_2D00_01.png"><img alt=" " src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_01-01.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_01_2D00_01.png" border="0" /></a><br /><span style="font-size:x-small;"><strong>Note</strong>: You may need to click on the image above in order to read the text.</span></p>
<p>These new cmdlets will not be automatically loaded by Windows Powershell, and as such, will not be available until the &quot;<strong>SkypeForBusiness</strong>&quot; PowerShell module is manually loaded at least once.&nbsp; After the module has been manually loaded (<strong>Import-Module SkypeForBusiness</strong>):</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_01-02.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_01_2D00_02.png"><img alt=" " src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_01-02.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_01_2D00_02.png" border="0" /></a><br /><span style="font-size:x-small;"><strong>Note</strong>: You may need to click on the image above in order to read the text.</span></p>
<p>Windows Powershell will automatically load these new cmdlets each time a new PS instance is launched:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_01-03.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_01_2D00_03.png"><img alt=" " src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_28_01-03.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_28_5F00_01_2D00_03.png" border="0" /></a><br /><span style="font-size:x-small;"><strong>Note</strong>: You may need to click on the image above in order to read the text.</span></p>
<p>Thanks to Dave Howe for this information!</p>]]></content:encoded>
    </item>
    <item>
      <title>Issue Installing Skype for Business Server 2015 in a Hardened Environment without Internet Access</title>
      <link>https://docs.microsoft.com/archive/blogs/dodeitte/issue-installing-skype-for-business-server-2015-in-a-hardened-environment-without-internet-access</link>
      <pubDate>Fri, 27 Nov 2015 12:45:00 GMT</pubDate>
      <dc:creator><![CDATA[dodeitte]]></dc:creator>
      <guid
        isPermaLink="false">https://blogs.technet.microsoft.com/dodeitte/2015/11/27/issue-installing-skype-for-business-server-2015-in-a-hardened-environment-without-internet-access/</guid>
      <description><![CDATA[During the install for Skype for Business Server 2015, SQL Express fails to install with the...]]></description>
      <content:encoded><![CDATA[<p>During the install for Skype for Business Server 2015, SQL Express fails to install with the following error message:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_27_01-01.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_27_5F00_01_2D00_01.png"><img alt=" " src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_27_01-01.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_27_5F00_01_2D00_01.png" border="0" /></a></p>
<p><strong>Prerequisite installation failed: Prerequisite installation failed: SqlInstanceRtc For more information, check your SQL Server log files. Log files are in the folder C:\Program Files\Microsoft SQL Server\MSSQL*.Rtc\MSSQL\Log, where the * represents your SQL Server version number. For example, SQL Server 2012 uses this path: C:\Program Files\Microsoft SQL Server\MSSQL11.Rtc\MSSQL\Log.</strong></p>
<p>Unfortunately, the log file didn&#39;t contain any helpful information on why the install failed.&nbsp; Looking at the Application Event Log, however, the following errors are shown:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_27_01-02.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_27_5F00_01_2D00_02.png"><img alt=" " src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_27_01-02.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_27_5F00_01_2D00_02.png" border="0" /></a></p>
<p>Log Name:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Application<br />Source:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MsiInstaller<br />Date:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 11/24/2015 8:25:06 PM<br />Event ID:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 11330<br />Task Category: None<br />Level:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Error<br />Keywords:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Classic<br />User:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; TEST\Administrator<br />Computer:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; TEST-W16-SE1.test.deitterick.com<br />Description:<br />Product: Microsoft Visual C++ 2010&nbsp; x64 Redistributable - 10.0.40219 -- Error 1330.A file that is required cannot be installed because the cabinet file C:\Program Files\Skype for Business Server 2015\Deployment\SQLEXPR_x64\redist\VisualStudioShell\VC10SP1\x64\vc_red.cab has an invalid digital signature.&nbsp; This may indicate that the cabinet file is corrupt.&nbsp; Error 270 was returned by WinVerifyTrust.</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_27_01-03.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_27_5F00_01_2D00_03.png"><img alt=" " src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_27_01-03.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_27_5F00_01_2D00_03.png" border="0" /></a></p>
<p>Log Name:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Application<br />Source:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; MsiInstaller<br />Date:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 11/24/2015 8:25:07 PM<br />Event ID:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1023<br />Task Category: None<br />Level:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Error<br />Keywords:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Classic<br />User:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; TEST\Administrator<br />Computer:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; TEST-W16-SE1.test.deitterick.com<br />Description:<br />Product: Microsoft Visual C++ 2010&nbsp; x64 Redistributable - 10.0.40219 - Update &#39;KB2565063&#39; could not be installed. Error code 1603. Additional information is available in the log file C:\Program Files\Microsoft SQL Server\120\Setup Bootstrap\Log\20151124_202244\VC10Redist_Cpu64_1.log.</p>
<p>The same errors are shown for the Microsoft Visual C++ 2010&nbsp; x86 Redistributable as well:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_27_01-04.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_27_5F00_01_2D00_04.png"><img alt=" " src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_27_01-04.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_27_5F00_01_2D00_04.png" border="0" /></a></p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_27_01-05.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_27_5F00_01_2D00_05.png"><img alt=" " src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_27_01-05.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_27_5F00_01_2D00_05.png" border="0" /></a></p>
<p>In this environment, the servers don&#39;t have internet access, so the installer is unable to validate the certificate and the installation fails.&nbsp; In addition, this particular customer uses OS images that have been hardened according to a set of STIGs (Security Technical Implementation Guide).&nbsp; You can find some more information on STIG <a href="https://en.wikipedia.org/wiki/Security_Technical_Implementation_Guide"><span style="color:#00749e;">here</span></a>.&nbsp; One of the STIG settings has you make a change to the way Authenticode performs certificate validation:</p>
<p><em>Microsoft Windows operating systems provide a feature called Authenticode. Authenticode technology and its underlying code signing mechanisms serve to provide a mechanism to identify software publishers and ensure that software applications have not been tampered with. Authenticode technology relies on digital certificates and is based on Public Key Cryptography Standards (PKCS) #7 (encrypted key specification), PKCS #10 (certificate request formats), X.509 (certificate specification), and Secure Hash Algorithm (SHA) and MD5 hash algorithms. .Net application developers sign their application code with their public key and Authenticode technology performs certificate validation tasks prior to allowing the application to run.</em></p>
<p>Looking at <strong>HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing</strong>, you can see that &quot;<strong>State</strong>&quot; is set to <strong>0x00010000</strong>:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_27_01-06.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_27_5F00_01_2D00_06.png"><img alt=" " src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_27_01-06.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_27_5F00_01_2D00_06.png" border="0" /></a></p>
<p>To resolve this issue and continue with the install, you will need to change the value of &#39;<strong>State</strong>&#39;&nbsp;back to <strong>0x00023c00</strong>:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_27_01-07.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_27_5F00_01_2D00_07.png"><img alt=" " src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_27_01-07.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_27_5F00_01_2D00_07.png" border="0" /></a></p>
<p>This will allow the install to complete successfully:</p>
<p><a href="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_27_01-08.png" original-url="https://blogs.technet.com/cfs-file.ashx/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_27_5F00_01_2D00_08.png"><img alt=" " src="https://msdnshared.blob.core.windows.net/media/TNBlogsFS/prod.evol.blogs.technet.com/CommunityServer.Blogs.Components.WeblogFiles/00/00/00/74/93/2015_11_27_01-08.png" original-url="https://blogs.technet.com/resized-image.ashx/__size/550x0/__key/communityserver-blogs-components-weblogfiles/00-00-00-74-93/2015_5F00_11_5F00_27_5F00_01_2D00_08.png" border="0" /></a></p>
<p></p>]]></content:encoded>
    </item>
  </channel>
</rss>