OCS Debug/Code Escalation Scenarios https://docs.microsoft.com/archive/blogs/premal/feed.xml Tue, 16 Apr 2019 06:14:07 GMT en-US hourly 1 Unable to with install Lync Server, due to "domain not ready error." or Prepare Active Directory shows "Partial" https://docs.microsoft.com/archive/blogs/premal/unable-to-with-install-lync-server-due-to-domain-not-ready-error-or-prepare-active-directory-shows-partial Mon, 20 Jun 2011 10:12:00 GMT https://blogs.technet.microsoft.com/premal/2011/06/20/unable-to-with-install-lync-server-due-to-domain-not-ready-error-or-prepare-active-directory-shows-partial/
Symptoms
=========
 
Get-CsAdDomain generates "The domain is not ready" after successful domain prep. Also Prepare Active Directory on Deployment Wizard shows "Partial" after a successful domain prep.



 
Cause
======
 
Check the following Trace statement, when you run OCS Logger "Powershell" and "Deployment" Components selected at Level->All, Flags->All
 
4361 TL_INFO(TF_COMPONENT) [1]0FC8.123C::02/22/2011-20:28:40.091.000022ce (Deployment,DeploymentContext.CreateCustomizedSession:deploymentenvironment.cs(411))(000000000283D742)Using default network credentials for AD session.
 
4392 TL_WARN(TF_STACKTRACE) [0]0FC8.123C::02/22/2011-20:28:40.107.000022ed (Deployment,DirectoryCommon.FindAces:directorycommon.cs(341))Unable to find the requested ace: contoso\RTCUniversalUserReadOnlyGroup; Allow; ReadProperty; ContainerInherit; Descendents; bf967aba-0de6-11d0-a285-00aa003049e2; e2d6986b-2c7f-4cda-9851-d5b5f3fb6706

Concentrate on the "Applies To: " for the ACL "RTCUserSearchPropertySet" for the User "RTCUniversalUserReadOnlyGroup". The ACL "RTCUserSearchPropertySet" for "contoso\RTCUniversalUserReadOnlyGroup" is applied to "This object and all descendant objects" is the cause of this issue.

 




Resolution
=========
 
Concentrate on the "Applies To: " for the ACL "RTCUserSearchPropertySet" for the User "RTCUniversalUserReadOnlyGroup". Changing the ACL "RTCUserSearchPropertySet" for "contoso\RTCUniversalUserReadOnlyGroup" to apply to ONLY  "Descendant User Objects" instead of  "This object and all descendant objects" will resolve this issue.

 

OK so adding, how did I actually find the problem :-), the interesting part
========================================================
 
Requested the output of the following from the customer: dsacls "CN=RTCUniversalUserReadOnlyGroup,CN=Users,DC=contoso,DC=com" , compared this with
the dsacls from a working environment: dsacls "CN=RTCUniversalUserReadOnlyGroup,CN=Users,DC=contoso,DC=com"
 
The delta showed up:
 

contoso.com

nwtraders.com

 

414 Permissions inherited to subobjects are:

415 Inherited to all subobjects

 

510 Allow  contoso\RTCUniversalUserReadOnlyGroup

511                                       SPECIAL ACCESS for RTCUserSearchPropertySet

512                                       READ PROPERTY

 

Missing here

 

 

 

 

163 Allow contoso\RTCUniversalUserReadOnlyGroup

164                                       SPECIAL ACCESS for RTCUserSearchPropertySet

165                                       READ PROPERTY

 

Missing here

804 Inherited to user

 

Missing here

226 Inherited to user

 

246 Allow NWTRADERS\RTCUniversalUserReadOnlyGroup      SPECIAL ACCESS for RTCUserSearchPropertySet

247                                                    READ PROPERTY

 
 
 After this it was just about using "dsa.msc" to locate the ACL "RTCUserSearchPropertySet" for "contoso\RTCUniversalUserReadOnlyGroup", and making sure the delta is handled.
]]> Powershell command to find the version of Lync Server and OCS 2007 R2 Server Installed Components https://docs.microsoft.com/archive/blogs/premal/powershell-command-to-find-the-version-of-lync-server-and-ocs-2007-r2-server-installed-components Tue, 07 Jun 2011 17:09:00 GMT https://blogs.technet.microsoft.com/premal/2011/06/07/powershell-command-to-find-the-version-of-lync-server-and-ocs-2007-r2-server-installed-components/ PS C:\Users\Administrator.CONTOSO> Get-WmiObject -query 'select * from win32_product' | where {$_.name -like "Microsoft Lync Server*"} | foreach {$_}

By first, go at this one, feedback is welcome !

Here is sample output from my lab environment after applying the CU2 updates. Hope this helps.  

=======

 

IdentifyingNumber : {22D89571-A55E-4BC1-9D26-26188DFDC218}

Name              : Microsoft Lync Server 2010, Mediation Server

Vendor            : Microsoft Corporation

Version           : 4.0.7577.139

Caption           : Microsoft Lync Server 2010, Mediation Server

 

IdentifyingNumber : {BBCDC3D1-010E-414A-8E71-096A8B4BE10A}

Name              : Microsoft Lync Server 2010, Conferencing Announcement Service

Vendor            : Microsoft Corporation

Version           : 4.0.7577.0

Caption           : Microsoft Lync Server 2010, Conferencing Announcement Service

 

IdentifyingNumber : {B9EFB994-8B55-4B9C-8BF2-5AA346D3DEF2}

Name              : Microsoft Lync Server 2010, Web Components Server

Vendor            : Microsoft Corporation

Version           : 4.0.7577.139

Caption           : Microsoft Lync Server 2010, Web Components Server

 

IdentifyingNumber : {E9DF4766-46E1-4C5D-84CD-F09F9F4E0B83}

Name              : Microsoft Lync Server 2010, Conferencing Attendant

Vendor            : Microsoft Corporation

Version           : 4.0.7577.0

Caption           : Microsoft Lync Server 2010, Conferencing Attendant

 

IdentifyingNumber : {84DA1457-E645-4AAE-A1F3-7C5E92A42335}

Name              : Microsoft Lync Server 2010, Response Group Service

Vendor            : Microsoft Corporation

Version           : 4.0.7577.0

Caption           : Microsoft Lync Server 2010, Response Group Service

 

IdentifyingNumber : {6ECBE6F7-1EA5-4B00-B217-66C82A66FF3B}

Name              : Microsoft Lync Server 2010, Web Conferencing Server

Vendor            : Microsoft Corporation

Version           : 4.0.7577.139

Caption           : Microsoft Lync Server 2010, Web Conferencing Server

 

IdentifyingNumber : {9521B708-9D80-46A3-9E58-A74ACF4E343E}

Name              : Microsoft Lync Server 2010, Core Components

Vendor            : Microsoft Corporation

Version           : 4.0.7577.139

Caption           : Microsoft Lync Server 2010, Core Components

 

IdentifyingNumber : {FD6F8E79-DFC6-47A5-85CF-BD964371A9BE}

Name              : Microsoft Lync Server 2010, WMI Backwards Compatibility

Vendor            : Microsoft Corporation

Version           : 4.0.7577.0

Caption           : Microsoft Lync Server 2010, WMI Backwards Compatibility

 

IdentifyingNumber : {A1A71989-3D97-4DC8-990E-940EA7128398}

Name              : Microsoft Lync Server 2010, Bandwidth Policy Service

Vendor            : Microsoft Corporation

Version           : 4.0.7577.0

Caption           : Microsoft Lync Server 2010, Bandwidth Policy Service

 

IdentifyingNumber : {B186564B-F214-4B33-9EC1-3012429A580D}

Name              : Microsoft Lync Server 2010, Call Park Service

Vendor            : Microsoft Corporation

Version           : 4.0.7577.0

Caption           : Microsoft Lync Server 2010, Call Park Service

 

IdentifyingNumber : {E0E8495B-BA09-4D88-91D8-27A1C878593E}

Name              : Microsoft Lync Server 2010, Core Management Server

Vendor            : Microsoft Corporation

Version           : 4.0.7577.0

Caption           : Microsoft Lync Server 2010, Core Management Server

 

IdentifyingNumber : {BCA7A57B-D703-4764-BC98-070D911AFF9E}

Name              : Microsoft Lync Server 2010, Audio Test Service

Vendor            : Microsoft Corporation

Version           : 4.0.7577.0

Caption           : Microsoft Lync Server 2010, Audio Test Service

 

IdentifyingNumber : {D7F389DB-3097-4B84-A9DB-F2E21B5F9C0D}

Name              : Microsoft Lync Server 2010, Application Host

Vendor            : Microsoft Corporation

Version           : 4.0.7577.0

Caption           : Microsoft Lync Server 2010, Application Host

 

IdentifyingNumber : {0E9CBB0D-CD15-43AB-8F3C-F3067FE042C3}

Name              : Microsoft Lync Server 2010, Administrative Tools

Vendor            : Microsoft Corporation

Version           : 4.0.7577.108

Caption           : Microsoft Lync Server 2010, Administrative Tools

 

IdentifyingNumber : {6E59AE4E-9E24-4557-9982-94C75B4DBDD1}

Name              : Microsoft Lync Server 2010, Reach Fonts

Vendor            : Microsoft Corporation

Version           : 4.0.7577.0

Caption           : Microsoft Lync Server 2010, Reach Fonts

 

IdentifyingNumber : {78D5615E-F753-40C1-B301-9AAD2727B9C8}

Name              : Microsoft Lync Server 2010, Front End Server

Vendor            : Microsoft Corporation

Version           : 4.0.7577.139

Caption           : Microsoft Lync Server 2010, Front End Server

 

IdentifyingNumber : {348DF89F-4278-4702-A94A-F0EF9BB39349}

Name              : Microsoft Lync Server 2010, Conferencing Server

Vendor            : Microsoft Corporation

Version           : 4.0.7577.139

Caption           : Microsoft Lync Server 2010, Conferencing Server

 

===========

The Same command can be used for Office Communications Server 2007 R2 too, by changing the query string here:

PS C:\Users\Administrator.CONTOSO> Get-WmiObject -query 'select * from win32_product' | where {$_.name -like "Microsoft Lync Server*"} | foreach {$_}

From: "Microsoft Lync Server*" to "Microsoft Office Communications Server 2007 R2*"

]]> How to make sure the latest update for XMPP Gateway is installed ? https://docs.microsoft.com/archive/blogs/premal/how-to-make-sure-the-latest-update-for-xmpp-gateway-is-installed Mon, 09 May 2011 17:32:00 GMT https://blogs.technet.microsoft.com/premal/2011/05/09/how-to-make-sure-the-latest-update-for-xmpp-gateway-is-installed/ Ran across the need for this recently, and thought will share it out here. Do share your feedback, also I am working on making this better and see how I can extend it to other Lync and OCS roles.

Method 1: Using Power-shell

=======================

 PS C:\Users\Administrator> Get-WmiObject -query 'select * from win32_product' | where {$_.name -eq "Microsoft Office Communications Server 2007 R2, XMPP Gateway" -and $_.version -eq "3.5.6907.221"} | foreach {$_.name}

 (Entire power-shell command on a single line)

 This is assuming it is Windows 2008 Server x64 using Windows Power-shell 2.0 installed as per instructions here: https://msdn.microsoft.com/en-us/library/ff637750.aspx

 If this outputs: “Microsoft Office Communications Server 2007 R2, XMPP Gateway”, we are good, else we need to apply https://support.microsoft.com/kb/2404570, before any further analysis.

 

Method 2: Using Control Panel -> Programs and Features -> Installed Updates -> KB2404570  

=====================================================================

 

 

]]> OCS User cannot join Live Meeting organized by a non-federated (not federated) OCS User https://docs.microsoft.com/archive/blogs/premal/ocs-user-cannot-join-live-meeting-organized-by-a-non-federated-not-federated-ocs-user Tue, 01 Mar 2011 09:26:21 GMT https://blogs.technet.microsoft.com/premal/2011/03/01/ocs-user-cannot-join-live-meeting-organized-by-a-non-federated-not-federated-ocs-user/ Symptom:

UserA in CompanyA (uses OCS) tries to join a Live meeting (using Live Meeting Console) organized by UserB in CompanyB (uses OCS).
CompanyA and CompanyB are not federated.

UserA cannot join the Live Meeting, when the UserAccount is configured in Live Meeting console.

UserA needs to delete the UserAccount and any external servers, to be able to join the meeting..

Cause:

Live Meeting Console, current expects that the CompanyB has the following SRV record deployed:  sip._tls.<CompanyB Domain>. This was not the case, and hence the join failed.

Resolution:

Request CompanyB to deploy the following the SRV record: sip._tls.<CompanyB Domain>. We are working on reverting to A records correctly, in case SRV records are not deployed. Look for a fix tentatively end of May'2011, as part of Cumulative update for Live Meeting Console.

]]> Lync GroupChat 2010 (UCMA Application) does not work, even after successful installation, with EventID 5286. https://docs.microsoft.com/archive/blogs/premal/lync-groupchat-2010-ucma-application-does-not-work-even-after-successful-installation-with-eventid-5286 Thu, 30 Dec 2010 15:13:00 GMT https://blogs.technet.microsoft.com/premal/2010/12/30/lync-groupchat-2010-ucma-application-does-not-work-even-after-successful-installation-with-eventid-5286/

 

Symptom

========

Lync GroupChat 2010 (UCMA Application) does not work, even after successful installation with EventID 5286.
 

Cause

=====

 During installation if the Application Pool Name box is empty, you can specify an application pool name. This is an FQDN and must match the subject name for the certificate that was previously assigned.

https://technet.microsoft.com/en-us/library/gg398345.aspx

Execute Get-CsTrustedApplicationPool. ?If the entry for Group Chat Server Pool shows Application Pool Name, different that subject name on any of the Certificates in the CA than we need to flag it.

EventID in the Event Log.

Log Name:      Lync Server
Source:        LS MGC TRANSPORT
Date:          12/8/2010 7:02:06 PM
Event ID:      5286
Task Category: (1096)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      chat.corp.lync.com
Description:
The Group Chat server can not establish or maintain MTLS connection to the Lync Server.
Reason string: RemoteDisconnected
Error code: -2146233088
Cause: This problem is usually caused by an invalid MTLS certificate configured on the Group Chat Server or Lync Server.
Resolution:
Review certificate related sections in Group Chat Planning and Deployment Guide. Ensure the MTLS certificates configured on the Group Chat Server and Lync Server are valid.
Event Xml:
<Event xmlns="https://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="LS MGC TRANSPORT" />
    <EventID Qualifiers="50248">5286</EventID>
    <Level>2</Level>
    <Task>1096</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2010-12-09T03:02:06.000Z" />
    <EventRecordID>135</EventRecordID>
    <Channel>Lync Server</Channel>
    <Computer>chat.corp.lync.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>RemoteDisconnected</Data>
    <Data>-2146233088</Data>
  </EventData>
</Event>

Repro Steps:

 Install Group Chat Server.

At this step: https://technet.microsoft.com/en-us/library/gg398345.aspx

Enter an incorrect Application Pool Name.

Group Chat Server will be installed correctly, but no clients or Admin tool logins will work.

Resolution

=========

The way to correct this, is NOT uninstalling and re-installing Group Chat Server with the correct Application Pool Name. Since uninstallation does not remove the entry from CsTrustedApplicationPool and hence on all future installations the Application Pool Name is pre-populated and grayed out. Customer would have to execute Remove-CsTrustedApplicationPool, to start fresh and allow him to re-enter the correct Application Pool Name.

 

]]> Possible way to convert Timestamps stored in SQL tables as BIGINT into readable date-time format https://docs.microsoft.com/archive/blogs/premal/possible-way-to-convert-timestamps-stored-in-sql-tables-as-bigint-into-readable-date-time-format Wed, 01 Dec 2010 14:06:11 GMT https://blogs.technet.microsoft.com/premal/2010/12/01/possible-way-to-convert-timestamps-stored-in-sql-tables-as-bigint-into-readable-date-time-format/ select [dbo] . [fnTicksToDate] (<timestamp in BIGINT format>)

Example:

select [dbo] . [fnTicksToDate] (634199505290117946)

returns:

2010-09-13 04:55:29.010

Hope this helps.

 

 

]]> Request for comments: Does your Live Meeting Console use explicitly specified Internal and External Server name (or IP Address) in User Accounts->Adavanced Connection Settings, if so Why ? https://docs.microsoft.com/archive/blogs/premal/request-for-comments-does-your-live-meeting-console-use-explicitly-specified-internal-and-external-server-name-or-ip-address-in-user-accounts-adavanced-connection-settings-if-so-why Tue, 23 Nov 2010 07:28:54 GMT https://blogs.technet.microsoft.com/premal/2010/11/23/request-for-comments-does-your-live-meeting-console-use-explicitly-specified-internal-and-external-server-name-or-ip-address-in-user-accounts-adavanced-connection-settings-if-so-why/  

Live Meeting Console can be configured with Internal and External Servers explicitly specified in UserAccounts-Advanced Connection Settings. However we generally recommend using Automatic detection, are there some limitations with using Automatic Configuration in your organization, that you all can help identify ? This will be great help in bringing to the Product Team's attention, an issue with our latest release  8.0.6362.191 when using the above shown configuration ( that we are currently investigating ). Please provide your comments here or email us directly at debugocs_ee@hotmail.com with your comments. This will be great help and highly appreciated !

]]> November 2010 - Latest updates for the Office Communications products https://docs.microsoft.com/archive/blogs/premal/november-2010-latest-updates-for-the-office-communications-products Mon, 22 Nov 2010 08:08:00 GMT https://blogs.technet.microsoft.com/premal/2010/11/22/november-2010-latest-updates-for-the-office-communications-products/  

Product

KBs

Office Communications Server 2007 R2

968802

OCS2009-dbupgrade

968802

Office Communicator 2007 R2

2291453

Office Communicator Phone Edition 2007 R2

2466291

XMPP Gateway

2404570

Live Meeting Console

2433231

Live Meeting Conferencing Add-In for Outlook

2433228

 

 

Additional Notes:

 

The Communicator Phone Edition is 6907.222. All other OCS products are 6907.221.

KBs take time to replicate so be patient

Stay tuned for any Group Chat update news.

 

]]> GroupChat Server is not syncing in changes to Chat Room membership, via Distribution List https://docs.microsoft.com/archive/blogs/premal/groupchat-server-is-not-syncing-in-changes-to-chat-room-membership-via-distribution-list Wed, 20 Oct 2010 16:01:20 GMT https://blogs.technet.microsoft.com/premal/2010/10/20/groupchat-server-is-not-syncing-in-changes-to-chat-room-membership-via-distribution-list/ Symptom:

GroupChat Server is not syncing in changes to Chat Room membership, via Distribution List

Cause:

This issue could happen, if the changes to the Distribution list are not completely synced in from the DC. In certain scenarios, we have a number of ports on the GroupChat Server in TIME_WAIT state when talking to the GC.

The following log entry in ChannelServer log, may be used to determine such a state:

276799 Microsoft.Rtc.Chat.MgcCommon.Exceptions.MgcActiveDirectoryException: Error accessing active directory. ---> System.Runtime.InteropServices.COMException (0x8007203A): The server is not operational.

Multiple instances of:

 

262061 DEBUG    |20100917-14:04:53.126|    14:        |ActiveDirectoryConne.ConnectToAD                                   | connecting to AD host <… >

Solution\Workaround:

Considering lowering the value of TcpTimedWaitDelay. The default is fairly high.

https://technet.microsoft.com/en-us/library/cc757512(WS.10).aspx

Consider increasing the number of available ports.

https://technet.microsoft.com/en-us/library/cc758002(WS.10).aspx

Verification:

After making the above changes (which do require a reboot) monitor the ChannelServer logs for instances of the traces mentioned in the Cause Section.

 

]]> How to interpret particular traces in the Live Meeting Console log https://docs.microsoft.com/archive/blogs/premal/how-to-interpret-particular-traces-in-the-live-meeting-console-log Tue, 19 Oct 2010 17:18:00 GMT https://blogs.technet.microsoft.com/premal/2010/10/19/how-to-interpret-particular-traces-in-the-live-meeting-console-log/ The QUESTION, I was asked recently, what does this trace really mean ?

1939 [MC] 17:59:14:566 GMT [PID 4644] [THREAD 260]  [D] [X-AV] SipAudioVideoSession::OnMediaStreamStateChanged: oldState = 2,newState = 4,direction = 1,reason = 1

ANSWER:

Considering Live Meeting Console is based of UCC API 1.0.

 

The states referred here are described here: https://msdn.microsoft.com/en-us/library/uccapilib.ucc_media_stream_state.aspx

 

Member name

Description

UCCMSS_ACTIVE

A flag indicating that the RTP session is flowing.

UCCMSS_INACTIVE

A flag indicating that the RTP session is not flowing.

UCCMSS_STARTED

A flag indicating the media stream is started, but the associated RTP session has not started to flow.

UCCMSS_STOPPED

A flag indicating that RTP and RTCP sessions are stopped.

Remarks

Win32 COM/C++ Syntax

Copy

typedef enum UCC_MEDIA_STREAM_STATE

{

   UCCMSS_STARTED = 0x0000001,

   UCCMSS_ACTIVE = 0x0000002,

   UCCMSS_INACTIVE = 0x0000003,

   UCCMSS_STOPPED = 0x0000004

};

 

The reason is described here:

 

https://msdn.microsoft.com/en-us/library/microsoft.office.interop.uccapi.ucc_media_stream_state_change_reason(office.12).aspx

 

 

Members

Member name

Description

UCCMSSCR_DEVICE_ERROR

A flag indicating that the media state changed because of a device error.

UCCMSSCR_ERROR

A flag indicating that the media state changed because of an error.

UCCMSSCR_MEDIA_CONNECTIVITY_FAILURE

A flag indicating that the media state changed because the media failed to be connected to the remote endpoint.

UCCMSSCR_NETWORK_BANDWIDTH_LIMITATION

A flag indicating that the media state changed because of the limitation of the network bandwidth.

UCCMSSCR_NO_DEVICE

A flag indicating that the media state changed because no media device is found.

UCCMSSCR_NO_PORT

A flag indicating that the media state changed because no port is found.

UCCMSSCR_NORMAL

A flag indicating that the media state changed because of a normal operation or event.

UCCMSSCR_PORT_MAPPING_FAILURE

A flag indicating that the media state changed because the specified port could not be mapped.

UCCMSSCR_REMOTE_REQUEST

A flag indicating that the media state changed because of the request by the remote endpoint.

UCCMSSCR_TIMEOUT

A flag indicating that the media state changed because it has timed out.

Remarks

An application can examine the reason for a media state change by reading the Reason property on the IUccMediaChannelEvent and IUccAudioVideoMediaChannelStreamsEvent interfaces and comparing it against the values defined here.

Win32 COM/C++ Syntax

Copy

typedef enum UCC_MEDIA_STREAM_STATE_CHANGE_REASON

{

   UCCMSSCR_NORMAL,

   UCCMSSCR_TIMEOUT,

   UCCMSSCR_NO_DEVICE,

   UCCMSSCR_NO_PORT,

   UCCMSSCR_PORT_MAPPING_FAILURE,

   UCCMSSCR_REMOTE_REQUEST,

   UCCMSSCR_MEDIA_CONNECTIVITY_FAILURE,

   UCCMSSCR_NETWORK_BANDWIDTH_LIMITATION,

   UCCMSSCR_DEVICE_ERROR,

   UCCMSSCR_ERROR

};

 

Conclusion:

“1939 [MC] 17:59:14:566 GMT [PID 4644] [THREAD 260]  [D] [X-AV] SipAudioVideoSession::OnMediaStreamStateChanged: oldState = 2,newState = 4,direction = 1,reason = 1”

 

Means: Media Stream is moving from Active state to Stopped state, because the connection TIMED Out. I am not sure how that maps to RTP timeout, but hopefully someone else can provide details on that, else let me know and I will dig it further up.

 

The Callback “OnMediaStreamStateChanged” is described here: https://msdn.microsoft.com/en-us/library/microsoft.office.interop.uccapi._iuccaudiovideomediachannelevents.onmediastreamstatechanged(office.12).aspx

 

]]>