Unified Communications by Yann Espanet

You have to choose between beeing secure or stop working with OCS according to Microsoft !:

Your evaluation period may be expired with this error in event viewver :

Event source: OCS Server
Event id: 12290
Event text: The evaluation period for Microsoft Office Communications Server 2007 R2 has expired. Please upgrade from the evaluation version to the full released version of the product.

So, you follow the “Upgrading Office Communications Server 2007 Evaluation to the Full Released Version” document :

http://www.microsoft.com/downloads/details.aspx?FamilyId=54A5521D-A928-46F2-8BF7-125DA636DD2E&displaylang=en

BUT here’s the result :

OCS Setup log :

Failure
[0xC3EC78D8] Failed to read the Office Communications Server version information. This can happen if the computer clock is not set to correct date and time.

 

After some research I’ve found that the workaround was to remove  the MS Crypto API security update KB974571. So I removed the update, rebooted the machine, and OCS 2007 R2 was up and running again, without any issues.

What is the position of MS regarding this issue :

http://support.microsoft.com/kb/974571/en-us

Microsoft recommends to postpone installing KB974571 on any LCS 2005 / OCS 2007 /OCS 2007 R2 servers.

“Microsoft is investigating this issue, and will determine the most appropriate way to address it. Customers who are not running OCS or LCS server are not affected by this known issue, and can safely ignore this issue.

Customers who have deployed the OCS or LCS product on a server should assess the risk that is involved to decide whether to install the security update on that server. These customers should revisit this Knowledge Base article often, because this article will be updated as soon as more information and a resolution are available.”

Nice one from MS !

Microsoft has released a critical security update for all versions of Exchange to patch a two critical vulnerabilities :

• The first vulnerability could allow remote code execution with a special TNEF message sent to Exchange Server. TNEF is another name for the Microsoft Outlook Rich Text Format, and an attacker who successfully exploited this vulnerability could take complete control of system with Exchange Server service account privileges.
• The second vulnerability is a denial of service with a specially crafted MAPI command sent to Exchange Server. An attacker who successfully exploited this vulnerability could cause the Microsoft Exchange System Attendant service and other services that use the EMSMDB32 provider to stop responding.

This security update is rated Critical for all supported editions of Microsoft Exchange 2000 Server, Microsoft Exchange Server 2003, and Microsoft Exchange Server 2007.

For more information :

Details on the Exchange exploit:
http://www.microsoft.com/technet/se…n/MS09-003.mspx

Download the patch :
http://www.microsoft.com/downloads/…&displaylang=en

 Exchange 2007 TNEF Conversion Options :
http://technet.microsoft.com/en-us/library/bb310786.aspx

Communications Server 2007

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

959385 Description of the update package for Communications Server 2007 Web Components: November 2008
http://www.kbAlertz.com/redir.aspx?kbs=213683

960318 You cannot receive or transfer files in Communicator 2007 if your computer or another user’s computer is behind a Network Address Translation (NAT) device
http://www.kbAlertz.com/redir.aspx?kbs=213626

959388 Error message when you try to expand a group in Office Communicator: “Cannot perform this action, and the cause is unknown”
http://www.kbAlertz.com/redir.aspx?kbs=213557

956389 Description of the update package for Communications Server 2007: November 2008
http://www.kbAlertz.com/redir.aspx?kbs=213464

958560 When a Communicator 2007 user calls a Conference Auto Attendant access number, the call always uses Mediation Server instead of going to the Conference Auto Attendant directly
http://www.kbAlertz.com/redir.aspx?kbs=213465

958561 Communications Server 2007 R2 remote users cannot make public switched telephone network (PSTN) calls when Communications Server 2007 servers or proxies are in the call path
http://www.kbAlertz.com/redir.aspx?kbs=213463

958980 Office Communications Server 2007 or Live Communications Server 2005 does not work correctly after you upgrade a domain controller to Windows Server 2008
http://www.kbAlertz.com/redir.aspx?kbs=213331

957422 Event ID 20633 occurs when you enable archiving in Communications Server 2007 and you are using a SQL Server 2000 Service Pack 4 server as the back-end SQL server
http://www.kbAlertz.com/redir.aspx?kbs=213246

956831 Description of the update package for Office Communications Server 2007 Audio Video Conferencing Server: October, 2008

http://www.kbAlertz.com/redir.aspx?kbs=213093

(more…)

Exchange Server 2007

954199 Description of the policy for how e-mail is filtered by the junk e-mail filters in Outlook or in Exchange Server

http://www.kbAlertz.com/redir.aspx?kbs=211967

952771 When you use Outlook to send an HTML e-mail message to an Exchange Server 2007 user, the e-mail message appears garbled, or it contains Asian characters

http://www.kbAlertz.com/redir.aspx?kbs=211977

953126 CDO-based applications and applications that use Exchange Web Services do not support meeting request status reporting at the same level as Outlook

http://www.kbAlertz.com/redir.aspx?kbs=211968

954204 Exchange services cannot be started, and event ID 7024 is logged after you install Symantec Mail Security on a Windows Server 2008-based computer that is running Exchange Server 2007

http://www.kbAlertz.com/redir.aspx?kbs=212021

952773 You receive an NDR message in an Exchange Server 2007 environment when you try to send an e-mail message to an address type that is supported by a fax connector

http://www.kbAlertz.com/redir.aspx?kbs=211933

953526 Error message when you try to migrate an e-mail message that is larger than 4 MB by using Microsoft Transporter Suite for Lotus Domino: “Maximum request length exceeded”

http://www.kbAlertz.com/redir.aspx?kbs=211853

953175 In an Exchange Server 2007 environment, you cannot reply directly to an e-mail message if the P2 header of the e-mail message contains data that is formatted incorrectly

http://www.kbAlertz.com/redir.aspx?kbs=211742

951427 MIME e-mail clients cannot read the body of clear signed messages in Outlook Web Access if the S/MIME control is not installed in Exchange Server 2007

http://www.kbAlertz.com/redir.aspx?kbs=211743

 

Communications Server 2007

954000 Address Book synchronization may occur two times when many clients connect to a computer that is running Communications Server 2007

http://www.kbAlertz.com/redir.aspx?kbs=212008

953907 Description of the update package for Communications Server 2007: June 2008

http://www.kbAlertz.com/redir.aspx?kbs=212007

953112 Event ID 56013 with an error code of 80070005 is logged in Event Viewer when you change the password for Office Communications Server 2007 service accounts

http://www.kbAlertz.com/redir.aspx?kbs=211931

950559 Description of the update for the Unified Communications Client API SDK

http://www.kbAlertz.com/redir.aspx?kbs=211831

Communications Server 2007
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
948906 Description of the compatibility issues between Messenger for Mac 6.0.3 and Communications Server 2007
http://www.kbAlertz.com/redir.aspx?kbs=210927

947410 Event ID 19129 is logged and the QoE Monitoring Server database becomes larger than expected on a computer that is running Office Communications Server 2007 QoE Monitoring Server
http://www.kbAlertz.com/redir.aspx?kbs=210926

947409 Description of the update for Office Communications Server 2007 Quality of Experience Monitoring Server: February 21, 2008
http://www.kbAlertz.com/redir.aspx?kbs=210925

948905 You cannot connect to Communications Server 2007 from a Live Meeting client or from Outlook in a multi-SIP domain environment
http://www.kbAlertz.com/redir.aspx?kbs=210963

949935 Description of the update package for database issues in Communications Server 2007: April 30, 2008
http://www.kbAlertz.com/redir.aspx?kbs=211298

947786 The Communications Server 2007 Software Update service cannot upload .cab files if the file name contains non-ASCII characters
http://www.kbAlertz.com/redir.aspx?kbs=211329

949260 Description of the Communications Server 2007 update package: March 2008
http://www.kbAlertz.com/redir.aspx?kbs=211392

949259 Error message when you send an instance message to a contact that is hosted on Communications Server 2007 in Communicator 2005 or in Communicator 2007: “This message was not delivered”
http://www.kbAlertz.com/redir.aspx?kbs=211391

952209 Changes to Yahoo! IM federation may affect users of Office Communications Server 2007 and Live Communications Server 2005
http://www.kbAlertz.com/redir.aspx?kbs=211416

952047 A deleted location profile continues to appear in the inband provisioning response from a Communications Server 2007 server
http://www.kbAlertz.com/redir.aspx?kbs=211441

(more…)

Communications Server 2007

949577 Error message when you open the management console of the Communications Server 2007 Software Update Service: “Please contact your server administrator”

http://www.kbAlertz.com/redir.aspx?kbs=210777

949574 Windows Mobile 5.1 and Communicator 2007 may not communicate with one another

http://www.kbAlertz.com/redir.aspx?kbs=210778

949579 Presence information appears as “Presence Unknown” when Live Communications Server 2005 users view the presence information of Communications Server 2007 users

http://www.kbAlertz.com/redir.aspx?kbs=210839

948259 The Schema Prep State is incorrectly displayed on a computer that is running the release version of Communications Server 2007

http://www.kbAlertz.com/redir.aspx?kbs=210332

948260 You may receive error messages when you run the Validation Wizard on a computer that is running Communications Server 2007 Access Edge Server

http://www.kbAlertz.com/redir.aspx?kbs=210333

946696 Description of an update for the Communications Server 2007 Software Update Service

http://www.kbAlertz.com/redir.aspx?kbs=210434

(more…)