Polycom has released version 5.6.0 for their range of VVX handsets, which includes the following enhancements for Skype for Business:
- Support for Dial Plan Normalization,
- Multiple Emergency Number Dial Plan
- Skype for Business User interface enhancements
- Skype for Business Conference Enhancements
- Device Lock Enhancements
- Profile Picture on Device Lock Screen
- Secure Single Sign-On With Third-Party Supporting Solutions
- Safe Transfer for Boss-Admin Enhancements
- Busy Options for Incoming Calls.
The release applies to the following phones and accessories:
- VVX 201
- VVX 300/301/310/311
- VVX 400/401/410/411
- VVX 500/501
- VVX 600/601
For the full list of updates, read the release notes.
How to install new firmware in Skype for Business
Today the new Cloud Connector Edition 2.0.0 is released. You can download it right here.
The Skype for Business Cloud Connector Edition is a set of packaged virtual machines for deployment on-premises which connect a customer’s existing Public Switched Telephone Network (PSTN) service provider circuits with Skype for Business Cloud PBX operating in Office 365. This allows for the user’s phone capability to be managed out of Office 365 while their phone calls continue to use their existing phone number, circuits and PSTN provider contract
The following updates were made in Skype for Business Cloud Connector Edition version 2.0.0:
- Deployed support for Media Bypass.
- Added the following NCS cmdlets an administrator uses to configure Media Bypass:
- Added new configurations under the TrunkConfiguration section in CloudConnector.ini:
EnableFastFailoverTimer: optional, default value is “true”.
ForwardCallHistory: optional, default value is “false”.
ForwardPAI: optional, default value is “false”.
- If a new deployment is created with this version, it is required to manually enter the password for CceService, ExternalCert and CABackupFile credentials. The domainadmin, vmadmin and safemodeadmin passwords are using password input for CceService by default, need to be entered again. Use the Get-CcCredential cmdlet with DisplayPassword parameter to view the passwords. Use Set-CcCredential to update the password for domainadmin and vmadmin.
- Added support to detect and recover Skype for Business services on the CMS server.
- Added new cmdlets Import-CcConfiguration and Export-CcConfiguration. After a user updates configurations in cloudconnector.ini in ApplianceRoot path, redeploy the appliance or wait for the CCE Management Service to upgrade the current appliance to new version. However, if only BaseVMIP, WSUSServer and/or WSUSStatusServer in cloudconnector.ini are updated, run Import-CcConfiguration, a redeploy is not required.
- Renamed the Renew-CcCACertificate, Renew-CcServerCertificate cmdlets to Update-CcCACertificate, Update-CcServerCertificate.
- Updated the Get-CcVersion cmdlet. User can pass a parameter to the cmdlet and retrieve RunningScripts, RunningBits and/or BackupBits version.
- Updated the Start-CcDownload cmdlet to support downloading only Skype for Business binaries.
- Updated the Set-CsHybridConfiguration and Get-CsHybridPSTNAppliance online cmdlets.
- Update Set-CcCrential to support updating password for domainadmin and vmadmin.
Join Microsoft this Friday, the 21st at 9 a.m. PT for our next Broadcast: Cloud Connector Edition – What’s New in 2.0!
This session covers the new release of CCE v2.0. We will discuss the major new features of Media Bypass and several improvements in reliability and scale.
Speakers: Oliver Chiu, Bill Verthein
Perhaps you have seen the error message below when trying to enable a Domain Admin (not recommended) in the Skype for Business control panel.
Active Directory operation failed on “DC01.skypedev.nl”. You cannot retry this operation:
“Insufficient access rights to perform the operation
00002098: SecErr: DSID-03150F93, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0
“.You do not have the appropriate permissions to perform this operation in Active Directory. One
possible cause is that the Lync Server Control Panel and Remote Windows PowerShell cannot modify
users who belong to protected scurity groups (for example, the Domain Admins group). To manage
users in the Domain Admins group, use the Lync Server Management Shell and log on using a Domain
Admins account. There are other possible causes. For details, see skype for Business Server 2015 Help.
You cannot use the Control Panel to users who belong to protected security groups. So your options are to either use Powershell as suggested in the error message or you could try this magical thing:
- Open active directory users and computers
- Enable the advanced features in the view menu
- Search for the account which is in a protected security group
- Go to Properties / Security / Advanced
- Check the following box: Include inheritable permissions
- Retry what you were doing in the Lync Control Panel
Now this might not be the best “securest” way of solving this issue, but for my lab environment I do not care too much about that, but i should think twice before doing this in a productional environment. Probably you should not Skype enable your domain admin accounts at all if you want to be and stay secure.