ErwinBierens.com | Sharing Knowledge

Microsoft Lync Connectivity Analyzer

14/06/2017 No Comments

Yesterday June 13 2017 Microsoft announced the retirement of the Lync Connectivity Analyzer, and will be no longer available for public download.
I’ve uploaded the latest version on my host. You can Download LyncConnectivityAnalyzer it right here.

What can you do with this tool?

This tool can help you to test both your internal and external network for the Lync Apps which are available via both the Windows Store and several other stores for mobile devices such as the MarketPlace.

There are a few parameters you will need to configure before you can start the test:

SIP URI;
password;
Username;
If Lync Discover will need to be used;
If the test is performed from internal or external;
For what kind of app you want to test.

Once these parameters have been specified you can push the start button.

After several seconds the result will be available and you know if your Lync infrastructure can offer service to the Apps.

Security, Skype for Business

Security Updates Skype for Business (Lync) Client – June 2017

14/06/2017 No Comments

During patch Tuesday Microsoft released two security patches for Skype for Business and one for Lync 2013.

Security update for Skype for Business 2016

Summary

This security update resolves vulnerabilities in Microsoft Office that could allow
remote code execution if a user opens a specially crafted Office file.
To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2017-0283.

Note To apply this security update, you must have the release version of
Skype for Business 2016 installed on the computer.

(download KB3203382)

Security update for Skype for Business 2015 (Lync 2013)

Summary

This security update resolves vulnerabilities in Microsoft Office that could allow
remote code execution if a user opens a specially crafted Office file.
To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2017-0283.

Note To apply this security update, you must have the release version of
Skype for Business 2015 (Lync 2013) installed on the computer.

Improvements and fixes

This security update contains improvements and fixes:

(download KB3191939)

Exchange, Windows Server 2016

Disable .NET Framework 4.7 from Windows Update

14/06/2017 No Comments

Microsoft posted a blog about .NET 4.7 with Exchange is not supported yet. (link)

About the .NET Framework 4.7

The .NET Framework 4.7 is an in-place upgrade to versions 4, 4.5, 4.5.1, 4.5.2, 4.6, 4.6.1, and 4.6.2 of the .NET Framework.
In case of Exchange we will need to block the automatic installation through Windows Update of the .NET Framework 4.7 patch.

These steps describes how to perform this blocking action.

How to disable update .NET 4.7 from Windows Update in Server 2016

Back up the registry.
Start Registry Editor. To do this, click Start, type regedit in the Start Search box, and then press Enter.

Locate and click the following subkey:

 HKEY_LOCAL_MACHINE\Software\Microsoft\NET Framework Setup\NDP

After you select this subkey, point to New on the Edit menu, and then click Key.
Type WU, and then press Enter.
Right-click WU, point to New, and then click DWORD Value.
Type BlockNetFramework47, and then press Enter.
Right-click BlockNetFramework47, and then click Modify.
In the Value data box, type 1, and then click OK.
On the File menu, click Exit to exit Registry Editor.

registry editor

Skype for Business

Configuring SEFAUtil – Skype for Business

13/06/2017 1 Comment

What is SEFA Util

SEFAUtil (secondary extension feature activation) is a command-line tool that enables Skype for Business Server 2015 communications software administrators and helpdesk agents to configure delegate-ringing, call-forwarding, simultaneous ringing, team-call settings and group call pickup on behalf of a Skype for Business Server 2015 user. The tool also allows administrators to query the call-routing settings that are published for a particular user.The SEFAUtil tool allows the administrator to enable/disable/modify call forwarding or simultaneously ringing on behalf of the user. The administrator can specify the target (in the form of a SIP URI) or use a target that has already been published by the user. This tool also allows administrators to add or remove delegates or team-call group members on behalf of the user.This tool is built on Microsoft Unified Communications Managed API (UCMA) 3.0 and requires that administrators create a trusted application in the Central Management store for SEFAUtil.

SEFAUtil (secondary extension feature activation) enables Skype for Business Server 2015 administrators and helpdesk agents to configure delegate-ringing, call-forwarding, simultaneous ringing, team-call settings and group call pickup on behalf of a Skype for Business Server 2015 user. This tool also allows administrators to query the call-routing settings that are published for a particular user.

Configure Trusted Application Pool

Office365, Skype for Business Online

Simplified port requirements for Skype for Business Online

12/06/2017 No Comments

Microsoft has announced that the 50,000-59,999 port range (UDP and TCP) no longer is a requirement for Skype for Business endpoints to communicate with Skype for Business Online.

Earlier this year Microsoft talked about making simplification for network connectivity for Skype for Business Online (see blog article) and they recently updated the guidance and removed the mentioned port range as a requirement: Office 365 URLs and IP address ranges

So which ports are required for clients?All clients need to be able to directly connect to Skype for Business Online on the following destination ports: (the IP addresses and FQDNs can be found in the Office 365 URLs and IP address ranges)

TCP 443
UDP 3478, 3479, 3480, 3481
Optional: UDP/TCP 50,000-59,999

Is there a minimum client version required to benefit from the port changes?

This change applies to all clients supported against Skype for Business Online. No clients are excluded and there are no specific minimum version required (although it is always recommended to run the latest and greatest version).

For more information read the blog post from Microsoft.