• Security Guide
• Uninstalling/Decommissioning Lync Server
• Troubleshooting Clients
• Bandwidth Calculator and User’s Guide (a great resource for granular information about bandwidth planning)
• Resource Kit Book Chapters:
  • Enterprise Voice
  • Response Group Service
  • SharePoint Integration

Updates to existing topics

Certificates and Wildcards

In addition, we clarified some of our guidance around certificates and wildcards. Lync Server 2010 supports wildcards only in the SAN and not the subject name.

For more details, see the following topics:

• Certificates Requirements for Internal Servers
• Certificate Requirements for External Servers
• Reference Architecture 1 Certificate Summary for Single Consolidated Edge
• Reference Architecture 2 Certificate Summary for Scaled Consolidated Edge (DNS Load Balanced)
• Reference Architecture 3 Certificate Summary for Scaled Consolidated Edge (Hardware Load Balanced)

Migration Updates

• Added guidance for changing conference directory ownership to new Lync Server pool before decommissioning legacy pool. For more details, see http://technet.microsoft.com/en-us/library/gg195693.aspx.
• Clarified merged topology and coexistence issues for Archiving, Monitoring, and System Center Operations Manager. For more details, see http://technet.microsoft.com/en-us/library/ gg195658.aspx.
• Clarified steps for migrating Remote Call Control. For more details, see http://technet.microsoft.com/en-us/library/gg398621.aspx .

Operational Guidance

New topics about Lync Server Control Panel have been added to the Operations, Planning, and Deployment sections of the documentation. The documentation now includes tips to troubleshoot access to Control Panel. To accommodate these and other updates to software requirements, permissions, and procedures for administrative tools installation, we added some new topics, as well as restructured other topics and sections. For details, see the following topics:

• Lync Server Control Panel
• Troubleshooting Lync Server 2010 Control Panel

We also updated information about Enterprise Voice branch-site resiliency to address recommendations regarding policy and dial plan configurations for different routing scenarios, as well as guidelines for handling call rerouting in outage scenarios, particularly for phone numbers that include extension numbers. For details, see:

• Branch-Site Resiliency Requirements

Topics about creating Quality of Service (QoS) policies were updated to include the executable names for components for which you can enable QoS. For details, see:

• Planning for Quality of Service (QoS)
• Creating a Quality of Service (QoS) Policy on Lync Server
• Creating a Quality of Service (QoS) Policy for the A/V Edge Service

The recommendations for choosing between deploying Survivable Branch Appliances or Survivable Branch Servers for branch-site resiliency have been updated. For details, see the following topic:

• Branch-Site Resiliency Solutions

The procedure to enable QoS on Windows Server 2003 and Windows XP now specifies that you use Group Policy to modify default Differentiated Services Code Point (DSCP) values. The topic now also includes the default DSCP values for the IP packets for audio and video. For details, see the following topic:

• Enabling Quality of Service (QoS) on Windows Server 2003 and Windows XP

The time interval that you can configure Lync 2010 to wait between connection attempts to Lync Server 2010 have been corrected to state that the accepted values are between 1 minute and 60 minutes.

Planning Updates

The Planning documentation for Enterprise Voice now contains additional clarification about requirements and recommendations for Mediation Server topologies. For details, see:

• Mediation Server Component
• Components and Topologies for Mediation Server
• Deployment Guidelines for Mediation Server

Enterprise Voice content was also updated to remove references to dual-forking to reflect that dual-forking is not supported in Lync Server 2010.

Clarification has been added to various topics that refer to the Enterprise Voice media bypass feature to explain that media bypass does not interoperate with every PSTN gateway, IP-PBX or SBC, also known as peers of the Mediation. Media bypass is supported only with products and versions listed at Unified Communications Open Interoperability Program – Lync Server.

Deployment Updates

Deployment documentation has been updated to specify that server in-band provisioning settings take precedence over settings configured by the user on the client. For details, see the following topic:

• Configuring Client Bootstrapping Policies for Lync 2010

March Updates

In case you missed the March updates, they included the following:

• Planning for Metropolitan Site Resiliency
• Deploying in a multiple forest environment
• Online documentation for the Lync Server 2010 Stress and Performance Tool. A Word version is also included in the tool setup.
• Lync Server 2010 Capacity Calculator
• Lync Server 2010 Stress and Performance Tool

In addition, we corrected the following errors found in our documentation:

• We corrected our guidance on deploying Edge Servers. Previously, our documentation said that deploying Edge Servers in an Active Directory domain was not supported. That was an error. This is now corrected in the Deployment Best Practices for External User Access topic.
• We also clarified the SQL Server database collocation and database instances. The supportability topics and all other topics referencing database collocation are now updated.

February Updates

• Updates to Capacity Planning Information
• Best Practices Analyzer Documentation
• Deploying Lync Server 2010 Enterprise Edition by Using the Planning Tool
• Group Chat Database Schema
• Using Monitoring Server Reports
• Deploying Remote Call Control
• Configure a Trusted Server Application
• Lync Server Logging tool help
• A revised version of the Server Virtualization in Lync Server 2010 document

Lync Server Resources

• Lync Server 2010 documentation in the TechNet Library
• DrRez blog
• Lync Server and Communications Server resources

Client Updates have been released a few weeks ago:
http://www.pro-exchange.be/blogs/ocs_wave_14/archive/2011/04/05/lync-2010-cummulative-update-2-cu2-april-2011.aspx

Updates that are released for Lync Server 2010

• Update for Administrative Tools
  2467771 Description of the
  update package for Lync Server 2010, Administrative Tools: January 2011

• Update for Core Components
  2500444 Description of the
  cumulative update for Lync Server 2010, Core Components: April 2011

• Update for Conferencing Server
  2514975
  Description of the cumulative update for Lync Server 2010, Conferencing
  Server: April 2011
• Update for Web Components Server
  2500441
  Description of the update package for Lync Server 2010, Web Components
  Server: April 2011
• Update for Standard/Enterprise edition Server
  2500442
  Description of the update for Lync Server 2010: April 2011
• Update for Web Conferencing Server
  2530592
  Description of the cumulative update for Lync Server 2010, Web
  Conferencing Server: April 2011
• Update for Mediation Server
  2502810 Description of the
  cumulative update for Lync Server 2010, Mediation Server: April 2011

• Update for Unified Communications Managed API 3.0 Runtime
• 2500448
  Description of the cumulative update for Lync Server 2010, Unified
  Communications Managed API 3.0 Runtime: April 2011

Your evaluation period may be expired with this error in event viewver :

Event source: OCS Server
Event id: 12290
Event text: The evaluation period for Microsoft Office Communications Server 2007 R2 has expired. Please upgrade from the evaluation version to the full released version of the product.

So, you follow the “Upgrading Office Communications Server 2007 Evaluation to the Full Released Version” document :

http://www.microsoft.com/downloads/details.aspx?FamilyId=54A5521D-A928-46F2-8BF7-125DA636DD2E&displaylang=en

BUT here’s the result :

OCS Setup log :

Failure
[0xC3EC78D8] Failed to read the Office Communications Server version information. This can happen if the computer clock is not set to correct date and time.

After some research I’ve found that the workaround was to remove the MS Crypto API security update KB974571. So I removed the update, rebooted the machine, and OCS 2007 R2 was up and running again, without any issues.

What is the position of MS regarding this issue :

http://support.microsoft.com/kb/974571/en-us

Microsoft recommends to postpone installing KB974571 on any LCS 2005 / OCS 2007 /OCS 2007 R2 servers.

Microsoft is investigating this issue, and will determine the most appropriate way to address it. Customers who are not running OCS or LCS server are not affected by this known issue, and can safely ignore this issue.

Customers who have deployed the OCS or LCS product on a server should assess the risk that is involved to decide whether to install the security update on that server. These customers should revisit this Knowledge Base article often, because this article will be updated as soon as more information and a resolution are available.

Nice one from MS !

• The first vulnerability could allow remote code execution with a special TNEF message sent to Exchange Server. TNEF is another name for the Microsoft Outlook Rich Text Format, and an attacker who successfully exploited this vulnerability could take complete control of system with Exchange Server service account privileges.
• The second vulnerability is a denial of service with a specially crafted MAPI command sent to Exchange Server. An attacker who successfully exploited this vulnerability could cause the Microsoft Exchange System Attendant service and other services that use the EMSMDB32 provider to stop responding.

This security update is rated Critical for all supported editions of Microsoft Exchange 2000 Server, Microsoft Exchange Server 2003, and Microsoft Exchange Server 2007.

For more information :

Details on the Exchange exploit:
http://www.microsoft.com/technet/se…n/MS09-003.mspx

Download the patch :
http://www.microsoft.com/downloads/…&displaylang=en

 Exchange 2007 TNEF Conversion Options :
http://technet.microsoft.com/en-us/library/bb310786.aspx

947410 Event ID 19129 is logged and the QoE Monitoring Server database becomes larger than expected on a computer that is running Office Communications Server 2007 QoE Monitoring Server
http://www.kbAlertz.com/redir.aspx?kbs=210926

947409 Description of the update for Office Communications Server 2007 Quality of Experience Monitoring Server: February 21, 2008
http://www.kbAlertz.com/redir.aspx?kbs=210925

948905 You cannot connect to Communications Server 2007 from a Live Meeting client or from Outlook in a multi-SIP domain environment
http://www.kbAlertz.com/redir.aspx?kbs=210963

949935 Description of the update package for database issues in Communications Server 2007: April 30, 2008
http://www.kbAlertz.com/redir.aspx?kbs=211298

947786 The Communications Server 2007 Software Update service cannot upload .cab files if the file name contains non-ASCII characters
http://www.kbAlertz.com/redir.aspx?kbs=211329

949260 Description of the Communications Server 2007 update package: March 2008
http://www.kbAlertz.com/redir.aspx?kbs=211392

949259 Error message when you send an instance message to a contact that is hosted on Communications Server 2007 in Communicator 2005 or in Communicator 2007: “This message was not delivered”
http://www.kbAlertz.com/redir.aspx?kbs=211391

952209 Changes to Yahoo! IM federation may affect users of Office Communications Server 2007 and Live Communications Server 2005
http://www.kbAlertz.com/redir.aspx?kbs=211416

952047 A deleted location profile continues to appear in the inband provisioning response from a Communications Server 2007 server
http://www.kbAlertz.com/redir.aspx?kbs=211441

Communicator 2007
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
948120 An audio conference or a video conference fails in Communicator 2007 when you try to invite a new participant to create a multiparty conference
http://www.kbAlertz.com/redir.aspx?kbs=210964

951152 Support for the Unified Communication clients when they are used together with Terminal Services in a remote desktop environment
http://www.kbAlertz.com/redir.aspx?kbs=211330

948734 On a client computer that is running Windows 2000 with Service Pack 4, you may notice that the volume is fading during the audio call after you start an audio call from Office Communicator 2007
http://www.kbAlertz.com/redir.aspx?kbs=211283

950335 Communicator 2007 cannot connect after you run a test connection in the Live Meeting 2007 client
http://www.kbAlertz.com/redir.aspx?kbs=211349

950493 Communicator 2007 cannot connect to a server that requires a signature on the first message
http://www.kbAlertz.com/redir.aspx?kbs=211393

951644 Error message when you try to log on to Communicator 2007: “Outlook Integration Error”
http://www.kbAlertz.com/redir.aspx?kbs=211417

951662 Description of the update for Communicator 2007: April 30, 2008
http://www.kbAlertz.com/redir.aspx?kbs=211445

951868 Registry settings for certain protocols are overwritten, and Communicator 2007 becomes the default application for these protocols when you log on to Communicator 2007
http://www.kbAlertz.com/redir.aspx?kbs=211444

951871 The presence status changes to Away for all Terminal Server users when an administrator locks the desktop or lets the screen saver run in Communicator 2007
http://www.kbAlertz.com/redir.aspx?kbs=211442

951870 Event IDs 8239 and 8206 are logged when you schedule and then cancel a meeting in Communicator 2007
http://www.kbAlertz.com/redir.aspx?kbs=211443

949498 Error message when a Communicator 2007 user sends a message that contains only Japanese characters to Communicator 2005 users: “<Username> cannot receive message in the format you used”
http://www.kbAlertz.com/redir.aspx?kbs=211446

Exchange Server 2007
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
949527 Some users cannot access Exchange Server 2007 Outlook Web Access after you create new mailboxes or migrate existing mailboxes
http://www.kbAlertz.com/redir.aspx?kbs=210945

951183 Error message when you try to uninstall Exchange Server 2007: “Process execution failed with exit code 5″
http://www.kbAlertz.com/redir.aspx?kbs=211262

951402 Multiple Exchange Server 2007 services do not start when you upgrade a computer that is also running Windows Server 2003 to Windows Server 2008
http://www.kbAlertz.com/redir.aspx?kbs=211333

951291 Mail flow to certain domains does not work when you run Exchange Server 2007 on a Windows Server 2008-based computer
http://www.kbAlertz.com/redir.aspx?kbs=211468

949577 Error message when you open the management console of the Communications Server 2007 Software Update Service: “Please contact your server administrator”

http://www.kbAlertz.com/redir.aspx?kbs=210777

949574 Windows Mobile 5.1 and Communicator 2007 may not communicate with one another

http://www.kbAlertz.com/redir.aspx?kbs=210778

949579 Presence information appears as “Presence Unknown” when Live Communications Server 2005 users view the presence information of Communications Server 2007 users

http://www.kbAlertz.com/redir.aspx?kbs=210839

948259 The Schema Prep State is incorrectly displayed on a computer that is running the release version of Communications Server 2007

http://www.kbAlertz.com/redir.aspx?kbs=210332

948260 You may receive error messages when you run the Validation Wizard on a computer that is running Communications Server 2007 Access Edge Server

http://www.kbAlertz.com/redir.aspx?kbs=210333

946696 Description of an update for the Communications Server 2007 Software Update Service

http://www.kbAlertz.com/redir.aspx?kbs=210434

Communicator 2007

944362 Error message when you transfer large files over a slow network link in Communicator 2005 or in Communicator 2007: “Cannot send <file name> to <remote user>”

http://www.kbAlertz.com/redir.aspx?kbs=210334

949210 Description of the update for Communicator 2007 Presence Controls: February 2008

http://www.kbAlertz.com/redir.aspx?kbs=210435

Exchange Server 2007

946506 The Autodiscover service fails for some Outlook 2007 users after you install Exchange Server 2007 Service Pack 1

http://www.kbAlertz.com/redir.aspx?kbs=210824

948800 Error message when you check the properties of a contact in Outlook: “The name cannot be resolved. The bookmark is not valid”

http://www.kbAlertz.com/redir.aspx?kbs=210823

948934 Event ID: 9040 may occur every 15 minutes on a computer that is running Exchange Server 2007

http://www.kbAlertz.com/redir.aspx?kbs=210717

948908 You cannot see the Mailbox role in the Exchange Management Console after certain updates are automatically installed

http://www.kbAlertz.com/redir.aspx?kbs=210716

947014 An Exchange Server 2007 mailbox server randomly generates many transaction logs in an Exchange Server 2007 Service Pack 1 environment

http://www.kbAlertz.com/redir.aspx?kbs=210606

949893 You cannot create a new mailbox or enable a mailbox in an Exchange Server 2007 environment on February 29, 2008

http://www.kbAlertz.com/redir.aspx?kbs=210607

947551 The Edgetransport.exe process may crash intermittently on an Exchange Server 2007 Service Pack 1 Edge server

http://www.kbAlertz.com/redir.aspx?kbs=210622

945309 An external NDR message is sent to all recipients on a distribution list in Exchange Server 2007 Service Pack 1 http://www.kbAlertz.com/redir.aspx?kbs=210660

948934 Event ID: 9040 may occur every 15 minutes on a computer that is running Exchange Server 2007

http://www.kbAlertz.com/redir.aspx?kbs=210717

948908 You cannot see the Mailbox role in the Exchange Management Console after certain updates are automatically installed

http://www.kbAlertz.com/redir.aspx?kbs=210716

Live Communications Server 2005

949575 You cannot start the Live Communications Server service on a Live Communications Server 2005 access proxy server

http://www.kbAlertz.com/redir.aspx?kbs=210825