Teams LBR outbound calls are failing

 Few points regarding Location based routing debug in Teams. A user can not call out and Teams shows error message:

"Get Outbound Direct routing - no trunk config found by LBR selection criteria."

in Usage reports, as well as in client logs (Ctrl-Shift-Alt-1 to generate logs in Teams client):

    "terminatedReason": 72,

    "ccCode": 403,

    "ccSubcode": 510546,

    "phrase": "Get Outbound Direct routing - no trunk config found by LBR selection criteria."

One of the possible reasons is that user has no Calling policy "AllowCallsPreventTollBypass"

The prerequisites for LBR:

Voice policy has PSTN usage pointing to routes to SBC with LBR enabled.

User connects from LAN segment that is known and attached to a network location

External public IP is in trusted list (if protected by Zscaler or something like that all Zscaler ranges must be in the trusted IP list, if no prox, then outgoing firewall IP must be included)

SBC is attached to the LBR location.

User has calling policy to prevent toll

Search-AdminAuditLog and Search-MailboxAuditLog with parameter return empty results in Exchange 2019 server

 Search-AdminAuditLog and Search-MailboxAuditLog with parameter return empty results - Exchange | Microsoft Docs

LC_E_VALIDATION_CERT_NO_KEYEXCHANGE error on Skype for Business

To fix the error (see below) with a certificate you need to recode pfx with SFB accepted CSP "Microsoft RSA SChannel Cryptographic Provider" , as explained here:

https://www.componentspace.com/Forums/PrintTopic1578.aspx 

openssl pkcs12 -in idp.pfx -out idp.pem

openssl pkcs12 -export -in idp.pem -out new-idp.pfx -CSP "Microsoft Enhanced RSA and AES Cryptographic Provider"

Log Name:      Lync Server

Source:        LS Protocol Stack

Date:          1/25/2022 9:35:40 AM

Event ID:      14397

Task Category: (1001)

Level:         Warning

Keywords:      Classic

User:          N/A

Computer:      

Description:

A configured certificate could not be loaded from store. The serial number is attached for reference.

Extended Error Code: 0xC3FC7D95(LC_E_VALIDATION_CERT_NO_KEYEXCHANGE).

SharePoint 2019 PSconfig stops with error An exception of type System.NullReferenceException was thrown. Additional exception information: Object reference not set to an instance of an object.

SP PSConfig does not like comments in web.config:

 https://docs.microsoft.com/en-us/sharepoint/troubleshoot/administration/nullreferenceexception-for-configuration-wizard 

Install Windows 2019 from USB

 https://www.thomasmaurer.ch/2018/07/create-a-usb-drive-for-windows-server-2019-installation/

# Define Path to the Windows Server 2019 ISO $ISOFile = "C:\Temp\WindowsServer2019.iso"   # Get the USB Drive you want to use, copy the friendly name Get-Disk | Where BusType -eq "USB"   # Get the right USB Drive (You will need to change the FriendlyName) $USBDrive = Get-Disk | Where FriendlyName -eq "Kingston DT Workspace"   # Replace the Friendly Name to clean the USB Drive (THIS WILL REMOVE EVERYTHING) $USBDrive | Clear-Disk -RemoveData -Confirm:$true -PassThru   # Convert Disk to GPT $USBDrive | Set-Disk -PartitionStyle GPT   # Create partition primary and format to FAT32 $Volume = $USBDrive | New-Partition -UseMaximumSize -AssignDriveLetter | Format-Volume -FileSystem FAT32 -NewFileSystemLabel WS2019   # Mount iso $ISOMounted = Mount-DiskImage -ImagePath $ISOFile -StorageType ISO -PassThru   # Driver letter $ISODriveLetter = ($ISOMounted | Get-Volume).DriveLetter   # Copy Files to USB Copy-Item -Path ($ISODriveLetter +":\*") -Destination ($Volume.DriveLetter + ":\") -Recurse   # Dismount ISO Dismount-DiskImage -ImagePath $ISOFile

Microsoft Teams Calling new features

 Yesterday Microsoft announced few new features in Teams:

https://www.microsoft.com/en-us/microsoft-365/blog/2020/12/01/restore-and-maintain-personal-connections-with-new-microsoft-teams-calling-features/

including: Teams SBA, SPAM detection, Ringback, Call recording to OneDrive, 

How to change Windows password in RDP or Citrix remote session

 Start "osk"  - On Screen Keyboard - then press CTRL-ALT and with mouse DEL on the osk.

How to enable online archive in Hybrid Exchange

https://social.technet.microsoft.com/wiki/contents/articles/51966.office-365-hybrid-enabling-in-place-archive-with-powershell.aspx

Sharepoint search error The item could not be indexed successfully because the item failed in the indexing subsystem.

https://docs.microsoft.com/en-us/archive/blogs/sp/clear-sharepoint-config-cache-with-powershell

http://bresleveloper.blogspot.com/2016/01/solved-item-could-not-be-indexed.html

in general

https://docs.microsoft.com/en-us/archive/blogs/sp/
https://blogs.msdn.microsoft.com/sharepoint_strategery/2014/12/04/sp2013-understanding-storage-locations-for-files-gathered-by-the-crawl-component/

is a good Knowledge base to keep in mind!

a tool to check Web site security from Mozilla

https://observatory.mozilla.org/

script to for TLS hardening in Windows servers

https://www.hass.de/content/setup-microsoft-windows-or-iis-ssl-perfect-forward-secrecy-and-tls-12

LDAP changes in Windows

https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/ldap-channel-binding-and-ldap-signing-requirements-march-2020/ba-p/921536#

https://support.microsoft.com/en-us/help/4546509/frequently-asked-questions-about-changes-to-ldap

https://www.msxfaq.de/windows/sicherheit/ldapenforcechannelbinding.htm

https://docs.microsoft.com/en-us/archive/blogs/russellt/identifying-clear-text-ldap-binds-to-your-dcs

Once more about Skype EWS

http://www.uclabs.blog/2013/01/lync-and-exchange-web-services-ews-and.html

if you have SIP and SMTP (primary) different, then you need to make sure that autodiscover works ok.  You can redirect _autodiscover._tcp_smtp.domain to autodiscover.another.smpt.domain 443 if the later is defined and works ok.  Then you do not need to worry about UC SAN SSL.

With autodiscover.smpt.domain SFB client will try to connect directly, with SRV you can redirect to another domain.

Audiocodes ACA and KEMP CTP

Audiocodes Certified Associate and KEMP Certified Technical Professional  in the pocket!

Exchange 2016 CU15 tips

run updatecas.ps1 script to fix OWA and ECP
also check out this

https://social.technet.microsoft.com/Forums/windowsserver/en-US/5259018c-aec7-4490-a500-e1af54798f14/exchange-2013-ecp-error-line-43?forum=exchangesvrgeneral

1. Application Settings >> BinSearchFolders
2. Change the path with C:\Program Files\Microsoft\Exchange Server\V15\bin;C:\Program Files\Microsoft\Exchange Server\V15\bin\CmdletExtensionAgents;C:\Program Files\Microsoft\Exchange Server\V15\ClientAccess\Owa\bin
3. Then reset IIS to check this issue.

how to put server in maintenance mode:

https://practical365.com/exchange-server/installing-cumulative-updates-on-exchange-server-2016/

https://www.enowsoftware.com/solutions-engine/exchange-2019-cu4-and-exchange-2016-cu15-explained


# start maintenance on the computer

$Computer = $ENV:ComputerName
Set-ServerComponentState $Computer -Component HubTransport -State Draining -Requester Maintenance
Redirect-Message -Server $Computer -Target

# Prevent DAG member becoming PAM
Suspend-ClusterNode $Computer

# Move all Mailbox Databases and prevent hosting copies on current server
Set-MailboxServer $Computer -DatabaseCopyActivationDisabledAndMoveNow $True
Set-MailboxServer $Computer -DatabaseCopyAutoActivationPolicy Blocked

# Put the Exchange 2013 server in Maintenance Mode:
Set-ServerComponentState $Computer -Component ServerWideOffline -State Inactive -Requester Maintenance
# verify

Get-ServerComponentState $Computer | ft Component,State –Autosize


# stop maintenance on the computer

$Computer = $ENV:ComputerName
Set-ServerComponentState $Computer -Component ServerWideOffline -State Active -Requester Maintenance
Resume-ClusterNode $Computer
Set-MailboxServer $Computer -DatabaseCopyActivationDisabledAndMoveNow $False
Set-MailboxServer $Computer -DatabaseCopyAutoActivationPolicy Unrestricted
Set-ServerComponentState $Computer -Component HubTransport -State Active -Requester MaintenanceRestart-Service MSExchangeTransport
Restart-Service MSExchangeFrontEndTransport

Get-ServerComponentState $Computer | ft Component,State –Autosize

.net 4.8 is slow

First of all it is slow, yes, wait up to 30 minutes...

Otherwise start Windows installer service is not running as well as go via link below:

https://dotnet.microsoft.com/download/dotnet-framework/net48


https://support.microsoft.com/en-us/help/2570538/installing-updates-for-the-microsoft-net-framework-4-can-take-longer-t

https://www.catalog.update.microsoft.com/Search.aspx?q=4486153

Exchange internal relay must not include Exchange DAG servers

We see some issues with Shadow queue accumulating on one of the servers, it seems to be related to the fact that Exchange servers have been added to internal FrontEnd relay connector:

https://practical365.com/exchange-server/no-need-create-connectors-internal-exchange-server-mail-flow/

We see that this server is not cleaning shadow often enough - look for code XQDISCARD
in the hub smtp logs on other servers:

https://docs.microsoft.com/en-us/exchange/mail-flow/transport-high-availability/shadow-redundancy?view=exchserver-2019

Skype for Business Address book SQL table

https://itspartlycloudy.com/2015/06/05/getting-lync-2013-address-book-data-from-sql/

Windows Hello on HP Probook 470 G0

If you are looking for fingerprint sensor drivers for Windows Hello, try to get it from here:

https://h30434.www3.hp.com/t5/Notebook-Hardware-and-Upgrade-Questions/Biometric-Validity-

Sensor-Driver-Windows-10/td-p/6703491 

I have WH bio-metric sensor successfully running on this platform.

D.

SFB RTCXDS is growing fast

You can run this SQL transaction few times a day:

use master;
BACKUP log rtcxds TO DISK = 'NUL:';
GO
USE RTCXDS;
DBCC SHRINKFILE(rtcxds_log, 200);
GO