728x90

1

Step by Step: Adding Your Second Lync Standard Edition Server 2013 & Creating an Associated Backup Pool for Resiliency Part 4

By Matt Landis __on 8/06/2012 10:23:00 AM

We are on a journey installing various Lync Server 2013 roles. In today's step by step, we will setup our 2nd Lync Server Standard Edition pool and then set it up as a Backup Registrar so automatic failover can happen. We will also look at Lync Server 2013's new failover capabilities that allow full client capability to be restored in the event of a disaster. To use this blog the only other lab you need to have done is Part 1.

Previous Articles in this Series:

  • Part 1 Step by Step Installing Lync Server 2013 Standard Edition Front End
  • Part 2- Step by Step Installing Lync Server 2013 SE Monitoring Server
  • Part 3 Step by Step Installing Lync Server 2013 Persistent Chat Server
  • Part 4 - Step by Step Installing Your 2nd Lync Server 2013 SE Server Associated Backup Pool for Resiliency

    Prepare the 2nd Front End Server: Prerequisites

    See Lync Server 2013 prerequisites here. Installing your 2nd Lync Pool is much like installing the first. We will go over the steps below briefly, with special notes. But for detailed notes on installing an FE server, just refer to the Part1 blog in this series.

    Install Lync Server 2013

    Insert Lync Server 2013 CD, and when you see popup below, click Yes

    Once the Deployment Wizard appears we are done here for now.

    Open Topology Builder to Add Your 2nd Front End Server/Pool

    Right Click on "Standard Edition Front End Servers" | New Front End Pool

    NOTE: While the topology builder and this blog refer to a Standard Edition Front End Pool, just be aware that a Standard Edition Front End Pool really is just one Front End Server, because there only can be one server in a Standard Edition Pool.

    Next | Enter our Backup Front End FQDN (FE02.lab.local) | Next

    Check Conferencing, Enterprise Voice. (Note: you will not be able to check CAC because only 1 per Site)

    Now instead of screenshots for each screen, we'll just note what we want to check.

  • Collocate Mediation = Yes | Next
  • Enable and Edge Pool = No | Next
  • let defaults | Next
  • let Defaults (Note: you need to create this share just like your original share) | Next
  • let defaults | Next
  • let defaults | Next
  • Action | Topology | Publish

    Goto the Primary (FE01.lab.local) Standard Server and Open Lync Server 2013 Deployment Wizard

    Click on "Install or Update Lync Server System"

    step 2 and Run

    After it completes, click Finish.

    Now Goto the Backup (FE02.lab.local) Standard Server and Open Lync Server 2013 Deployment Wizard

    Click on "Install or Update Lync Server System"

  • Step 1 Run (15-30minute wait) Finish
  • Step 2: Run | Next (10minutes wait)
  • Step 3
  • Step 4

    We'll Test Our 2nd Pool/Server By Moving Users to It

    To test, log into Lync Server control panel. Notice you will now be asked which Lync pool you want to log in to. Let's select FE01.lab.local.

    Once the LSCP is open well click Users | Find | Select u1@lab.local | Action | Move Selected Users to Pool… |

    Now lets select our new Pool/Server (FE02.lab.local) and click OK.

    After you move a user there is no need to refresh the user list, this is automatically done for you. And, sure enough, the u1@lab.local is now on FE02.lab.local! Great.

    Now lets open Lync 2013 client and login using user u1@lab.local that we just enabled on our 2nd Standard Edition Front End Pool/Server (FE02.lab.local). Good, our new pool works!

    What Happens when we change Pools During an Active Conversation or Call?

    Since we could easily move user(s) to our new Pool/Server with no sweat, now lets get dangerous. Call someone using u1@lab.local and CHANGE POOLS DURING THE CALL. 

    Let's repeat the steps we just took above, but do it during a live call and see what happens.

    Below is a screenshot of what happens if you change pools/servers during a peer to peer call:

  • The Lync 2013 client will momentarily logout and back in again
  • During this time (as you see below) the call continues
  • Sharing continues
  • Video continues
  • As noted in the conversation window, functionality is momentarily limited:
  • Video cannot be started during momentary logout/in
  • Sharing limited and below items will be interrupted
  • Polls
  • whiteboard
  • Powerpoint

    That' pretty cool, right? Yeah.

    Setup a Resilient Pool (aka Associated Backup Pool)

    Now let's setup our 2nd Front End Pool/Server as an Associated backup pool so that if our 1st Front End Pool goes down the clients can automatically failover to the 2nd Front End Pool.

    Open Topology Builder and download the topology.

    Next, we'll edit the primary "Standard Edition Front End Servers" by right clicking and click "Edit Properties"

    Now we can define our Resiliency settings

  • Associated backup pool = FE02.lab.local; (Note the warning about having both FE's in the same site. For our lab, and in some production we can ignore this)
  • Automatic = Checked
  • Failover = 30secs (for lab purposes, this would be short for production)
  • Failback = 30secs (for lab purposes)
  • Then click OK to finish.

    Let's Publish the Topology by clicking: Action | Topology | Publish | Next |

    Open text file to see what you should do next. In our case we are instructed to run Install or Update Setup/Update on FE01 and FE02. Now click Finish.

    Based on our "next steps" instructions noted above, lets open Lync Server Deployment Wizard on FE01.lab.local and click on "Install or Update Lync Server System"

  • Step 2 Run | Next |Next
  • Step 4 Run | Next | (this will get our new Lync server Backup Service running)

    Lets open Lync Server Deployment Wizard on FE02.lab.local and click on "Install or Update Lync Server System"

  • Step 2 Run | Next
  • NOTE: If Step 2 fails with "Can not update database XDS"  error then we need to manually install the rtc database using the PS command below:
  • install-csdatabase centralmanagementdatabase sqlserverfqdn FE02.lab.local sqlinstancename rtc
  • Now run Step 2 again.
  • Step 3 (if necessary)
  • Step 4

    Run the below Powershell commands on your FE01.lab.local to ensure conferencing data is replicated:

  • Invoke-CSBackupServiceSync PoolFqdn FE01.lab.local
  • Invoke-CSBackupServiceSync PoolFqdn FE02.lab.local

    Add DNS SRV Record for Backup Pool/Server

    Now lets go into DNS and add a record for our Backup Pool /Server. This SRV record is necessary so that if the first server (FE01.lab.local in our lab) goes down, the client can find the backup Pool/Server.

    So let open the DNS server management and add the SRV record. The things that are important:

  • Service = _sipinternaltls
  • Protocol = _tcp
  • Priority = 10 (take note: this value is different than your initial SRV record)
  • Weight = 10 (take note: this value is different than your initial SRV record)
  • Port number = 5061
  • Host offering this server = FE02.lab.local

    After you have added this DNS record you might want to verify it has taken effect on the client PC by running NSLookup on the clients you will be testing.

  • NSLookup
  • set type=srv
  • _sipinternaltls._tcp.lab.local

    You Might Need This Step, But Only do it if Needed: Remove The Cert Without the Backup Server Name in it

    NOTE: Please, take a minute and thank Dustin Hannifin and Jason Lee for providing this crucial step in this blog post

    With both Primary and Backup Front End Server running do the following:

    Exit Lync 20013 client on client machine.

    On same client machine: Open MMC

    File | Add/Remove Snap-in | Certificates | My User Account | Ok

    Navigate to: Personal | Certificates and delete the cert named same as your Lync username.

    Now let log back into Lync 2013 client.

    Now, Let's Test Resiliency by Disabling NIC on Primary Front End (FE01.lab.local)

    Make sure all your users (that you want to test resiliency for) are homed on FE01.lab.local. Next, we'll simulate our FE01.lab.local machine being down by disabling the NIC.

    Now around 30 seconds, our client(s) should log out. Sure enough!

    Now they will try to login to the backup pool (in this case FE02.lab.local)

    NOTE: We setup our failover to happen in 30seconds. I've noticed in my lab the failing Lync clients will logout very near 30 seconds, but it could take several minutes till the clients are able to log back into the Associated Backup Pool/Server (FE02.lab.local). (ie: be fully failed over) I haven't taken the time to investigate if this is my lowly lab's performance 

    , or something built into Lync. (if someone knows, please post a comment)

    But sure enough, it logged into backup pool! You will notice the Lync 2013 client let's you know you have some limitations:

  • Contact List is unavailable
  • Call Forwarding may not be working
  • Delegates and Team-Call may not be receiving calls
  • Limited chat room access
  • Etc.

    Now if we enable the NIC on FE01.lab.local the clients should Failback to FE01.lab.local in 30 seconds. (NOTE: on my lab some clients would failback as soon as 10 seconds.)

    Next We Will Take a Look at New Lync Server 2013 Failover Options

    Much of what we have discussed in this blog so far is largely the functionality you will find in Lync Server 2010. (I suspect you could use most of the above steps in Lync 2010.) But with Lync Server 2013, the Lync Server administrator can now failover the CMS and the failed pool so that the "Limited Functionality due to outage" is removed. Let's get started with our failover.

    Our first step is to find out where the Active Central Management Database is hosted. To do this we run the PowerShell:

  • Get-CsService CentralManagement

    As shown below, FE01.lab.local is the PoolFqdn (we will refer to this as $CMS_Pool) of the currently Active CMS.

    The next step is to check if the the $CMS_Pool is running Lync Server 2013. You can do this in Topology Builder (in our lab we know it is, but in a live environment we might not) If the $CMS_Pool is running Lync 2013 we can use this PowerShell to see who it's backup pool is:

    Get-CsPoolBackupRelationship PoolFQDN $CMS_Pool

    As shown below we can see the $Backup_Pool is FE02.lab.local

    Next we will see if the $CMS_Pool is available right now:

    Get-CsManagementStoreReplicationStatus CentralManagementStoreStatus

    Below we have an example how this command will look with the $CMS_Pool available.

    Now lets disable the NIC on $CMS_Pool (ie FE01.lab.local) to simulate server down. Our primary Lync FE is now down! (shown below)

    Now run the Get-CsManagementStoreReplicationStatus CentralManagementStoreStatus  command again. Note that the command will fail/error out if the $CMS_Pool/FE01.lab.local is not available.

    (NOTE: If this is a Ent. Edition server you will need to check which Back End holds the primary CMS using: Get-CsDatabaseMirrorState -DatabaseType CMS -PoolFqdn <Backup_Pool Fqdn> . Read more about this command by Clicking Here. Running this command on Std. Edition will fail. On a Std. Edition server there is only one server so we know which it is. )

    Next we will run the command to failover the Central Management Server to our Backup Server:

  • Invoke-CsManagementServerFailover -BackupSqlServerFqdn FE02.lab.local BackupSqlInstanceName RTC Force

    Now lets verify the move happened by running:

  • Get-CsManagementStoreReplicationStatus CentralManagementStoreStatus

    Sure enough! the new ActiveMasterFQDN is now FE02.lab.local (as shown below). Great!

    Now we can fail over the Pool by running:

  • Invoke-CsPoolFailOver PoolFqdn FE01.lab.local Disastermode Verbose

    After runningVoila! The Lync Client services are automatically restored to Lync 2013and the "Limited Functionality" notice disappears with no user interaction!

    Notes:

  • On my 3 user lab this script took about 50 seconds to complete. After it completed I waited a little over a minute until full capability was restored to the Lync client!
  • The Chat service was not restored because resiliency was not setup in our lab for this service.

    Conclusion

    Well--yahoo! We have successfully setup a Lync Standard Edition Associated Backup Pool and we have demonstrated Lync Server 2013's very improved complete Failover resiliency.

    Continue your lab with more articles in this Lync Server 2013 Step by Step Series:

  • Part 1 Step by Step Installing Lync Server 2013 Standard Edition Front End
  • Part 2- Step by Step Installing Lync Server 2013 SE Monitoring Server
  • Part 3 Step by Step Installing Lync Server 2013 Persistent Chat Server
  • Part 4 - Step by Step Installing Your 2nd Lync Server 2013 SE Server Associated Backup Pool for Resiliency
  • Part 5 Step by Step Enabling Lync Server 2013 Enterprise Voice Features, Response Groups and Managers
  •    

    Special Thanks to Elan Shudnow and his great article on Lync 2010 Resiliency:

    http://www.shudnow.net/2012/05/04/lync-2010-central-site-resilience-w-backup-registrars-failovers-and-failbacks-part-3/

       

    http://social.technet.microsoft.com/wiki/contents/articles/9289.second-lync-standard-edition-server-to-provide-a-limited-high-availability-en-us.aspx

    http://jasonmlee.net/archives/459

  • See this post
  • If you want to Fail Back to FE01.lab.local

  • Invoke-CsPoolFailback -PoolFQDN FE01.lab.local Verbose  (may take 10-15minutes; Lync will logout/in near end)
  • Invoke-CsManagementServerFailover -BackupSqlServerFqdn FE02.lab.local BackupSqlInstanceName RTC Force ( this just takes 10secs)

       

    출처: <http://windowspbx.blogspot.kr/2012/08/step-by-step-adding-your-second-lync.html>

       

       

728x90
728x90

Memory Pool Monitor (poolmon.exe)를 사용하여 커널모드 메모리 누수를 찾아보자

 

- Detecting and analyzing Memory Leaks

 

 


## poolmon.exe 사용법


1) poolmon.exe로 Paged Pool 사용량 확인

 

2) Tag를 확인하여

 

3) c:\>findstr /m /s /i tag명 *.sys

 

 

옵션

 

 

 

참고사이트


http://support.microsoft.com/kb/177415/ko
http://jkmoon.tistory.com/100
http://withsage.net/blog/archives/category/it/computer/windbg

http://process3.blog.me/20089981837
http://laigo.kr/34


728x90
728x90

IIS 메모리 점유율이 많아질 경우 항상 잊어먹어서 찾는 검색이네요.

자주 쓸 일이 있어서 기록해둡니다.



C:\>cd Windows\system32\inetsrv

C:\Windows\System32\inetsrv>appcmd list wp

WP "10472" (applicationPool:MSExchangeOABAppPool)

WP "7812" (applicationPool:MSExchangeMapiMailboxAppPool)

WP "4948" (applicationPool:MSExchangeRpcProxyFrontEndAppPool)

WP "8164" (applicationPool:MSExchangeECPAppPool)

WP "7804" (applicationPool:MSExchangeMapiAddressBookAppPool)

WP "3952" (applicationPool:MSExchangeSyncAppPool)

WP "5788" (applicationPool:MSExchangeOWAAppPool)

WP "12484" (applicationPool:MSExchangeServicesAppPool)

WP "1544" (applicationPool:MSExchangeAutodiscoverAppPool)

WP "6616" (applicationPool:MSExchangeMapiFrontEndAppPool)

WP "9504" (applicationPool:MSExchangeRpcProxyAppPool)

WP "9584" (applicationPool:MSExchangePowerShellFrontEndAppPool)

WP "10188" (applicationPool:MSExchangePowerShellAppPool)

WP "6936" (applicationPool:MSExchangeOWACalendarAppPool)


C:\Windows\System32\inetsrv> 



Recycle 할 때 사용하는 명령 줄은 아래와 같다.

IIS 6.0 : cscript //nologo C:\Windows\system32\iisapp.vbs /a "<웹응용프로그램이름>" /r
     예) cscript //nologo C:\Windows\system32\iisapp.vbs /a "SharePoint - 80" /r

IIS 7.0 : C:\Windows\System32\inetsrv\appcmd recycle apppool /apppool.name:"<웹응용프로그램이름>"
     예) C:\Windows\System32\inetsrv\appcmd recycle apppool /apppool.name:"SharePoint - 80"



>tasklist   --> 프로세스 확인

>tasklist /svc  --> 프로세스 서비스 보기

>tasklist /m xxx.dll   --> xxx.dll을 사용하는 모든 프로세스 찾기


728x90
728x90

SFB Powershell을 띄운 후 아래와 같이 입력


PS C:\>Export-CsArchivingData -Identity "archivingdatabase:sfbdb.koreare.com" -StartDate 3/1/2016 -OutputFolder c:\

Total number of sessions: 41  Successfully exported sessions: 41 Failed session

s: 0 



출력된 화면

c:\밑으로 백엔드FQDN_아카이빙폴더명으로 날자별 폴드가 생성 됨



eml형식 아웃룩으로 열어보자

아웃룩에서 연 화면


FYI...https://technet.microsoft.com/en-us/library/gg398452.aspx

728x90
728x90

티스토리 초대장 나눠드립니다.



댓글로 메일주소 주시면 배포해드릴께요.

10장 있어용~^^

728x90
728x90

SSD 512GB 싸게 하나 장만했네요.

한번 해봐야겠습니다.

0. AHCI 변경

   BIOS Setup > Main > SATA Configuration > OnChip SATA Channel > SATA Port1 - Port4 > IDE -> AHCI

1. C1E 비활성화
   BIOS Setup > Advanced > CPU Configuration > C1E Support > Enabled -> Disabled

2. Prefetch & Superfetch 비활성화
   ①  제어판 > 시스템 및 보안 > 관리 도구 > 서비스 > Superfetch > 시작 유형 - "사용 안 함"
   ② 시작 > 실행 > regedit > HKEY_LOCAL_MACHINE > SYSTEM > CurrentControlSet > Control > Session Manager > Memory Management > PrefetchParameters > EnablePrefetcher - "0" & EnableSuperfetch - "0"

3. Windows Error Reporting Service 비활성화
   제어판 > 시스템 및 보안 > 관리 도구 > 서비스 > Windows Error Reporting Service > 시작 유형 - "사용 안 함"

4. Windows Search 비활성화
   제어판 > 시스템 및 보안 > 관리 도구 > 서비스 > Windows Search > 시작 유형 - "사용 안 함"

5. 디스크에 쓰기 캐시 사용 (SandForce 계열 SSD는 체크 해제)
   제어판 > 시스템 및 보안 > 시스템 > 장치 관리자 > 디스크 드라이브 > SSD - 선택 > 속성 > 정책 > 장치에 쓰기 캐싱 사용 - 체크

6. 메모리 덤프 비활성화
   제어판 > 시스템 및 보안 > 시스템 > 고급 시스템 설정 > 시작 및 복구 - 설정 > 시스템 오류 - 디버깅 정보 쓰기 - "없음"

7. 시스템 복원 기능 비활성화
   제어판 > 시스템 및 보안 > 시스템 > 시스템 보호 > SSD - 선택 - 구성 > 디스크 공간 사용 - 삭제 & 복원 설정 - 시스템 보호 해제 - 체크

8. 디스크 색인 비활성화
   로컬 디스크(SSD) > 속성 > 이 드라이브의 파일 속성 및 내용 색인 허용 - 체크 해제

9. 디스크 조각모음 비활성화
   시작 > 실행 > dfrgui > 일정 구성 > 예약 실행(권장) - 체크 해제

A. 액세스한 날짜 비활성화
   명령 프롬프트(관리자 권한으로 실행) > fsutil behavior set disablelastaccess 1

B. 가상 메모리 비활성화
   ① 제어판 > 시스템 및 보안 > 시스템 > 고급 시스템 설정 > 성능 - 설정 > 고급 > 가상 메모리 - 변경 > 모든 드라이브에 대한 페이징 파일 크기 자동 관리 - 체크 해제 & 페이징 파일 없음 - 체크 - 설정
   ② 시작 > 실행 > regedit > HKEY_LOCAL_MACHINE > SYSTEM > CurrentControlSet > Control > Session Manager > Memory Management > ClearPageFileAtShutdown - "0" & DisablePagingExecutive - "1"

C. 최대절전모드 비활성화
   ① 명령 프롬프트(관리자 권한으로 실행) > powercfg -h off
   ② 제어판 > 하드웨어 및 소리 > 전원 옵션 > 고성능 - 체크

D. 자동 Trim 작동 여부 확인 & 활성화
   명령 프롬프트(관리자 권한으로 실행) > fsutil behavior query DisableDe1eteNotify -> "DisableDe1eteNotify = 0"이면 Trim 작동중
   미작동시 fsutil behavior set DisableDe1eteNotify 0 

E. 휴지통 사용 안하기
   휴지통 > 속성 > SSD - 선택 > 선택한 위치에 대한 설정 - 파일을 휴지통에 버리지 않고 삭제할 때 바로 제거 - 체크

F. NTFS 파일시스템 설정 변경
   시작 > 실행 > regedit > HKEY_LOCAL_MACHINE > SYSTEM > CurrentControlSet > Control > FileSystem > NtfsDisable8dot3NameCreation - "1" & NtfsMemoryUsage - "2"

G. 시스템 메모리 할당 - 프로그램에 최적화
   시작 > 실행 > regedit > HKEY_LOCAL_MACHINE > SYSTEM > CurrentControlSet > Control > Session Manager > Memory Management > LargeSystemCache - "0"

"5. 디스크에 쓰기 캐시 사용"은 SSD에 따라 최적의 설정이 달라 질 수 있으니 참고하시고,
"B. 가상 메모리 비활성화"는 특정 프로그램들에서는 메모리 부족 에러가 뜰 수 있다고 하니,
각자의 상황에 따라 선택적으로 적용하시면 됩니다.


728x90
728x90








728x90

'마니이야기 > 주현' 카테고리의 다른 글

주현이 칭찬 해주깅~~~  (0) 2016.02.29
주현이 100일 사진  (0) 2015.06.12
백일상~ 차렸어요  (0) 2015.05.21
주무시는 아드님  (0) 2015.05.19
아들 안티 사진~ㅋㅋㅋ  (0) 2015.05.19
728x90

Lync/SFB 에서 정책을 백업 및 복구 하는 방법입니다.


Export 방법

Get-CsClientPolicy | Export-Clixml -Path "c:\csclientpolcy.xml"


Import 방법

Import-Clixml "C:\csclientpolcy.xml" | Set-CsClientPolicy


끝.


참고

Lync 2013 Backup Script

http://lyncscripts.blogspot.kr/2013/09/lync-2013-backup-script.html
I have to admit the Lasse' scripting talents (and his willingness to share) has delivered some awesome scripts. Todays blog is evidence of his skills...his work is found here http://tech.rundtomrundt.com/p/lync-scripts.html

Thanks buddy!

<#
.Synopsis
   This is a script to make a backup of your Lync 2013 Enterprise edition server environment.
   It should be run on a windows server 2012, and a 2013 Lync server.
.DESCRIPTION
    A script to backup vital components in a Lync Enterprise Edition deployment
    Created by Lasse Nordvik Wedø - All rights reserved
    Http://tech.rundtomrundt.com

    - This script is for a Enterprise Edition Server.
    - The script has only been tested in single site topology. I suspect adjustments must be made for deployments with more than one site (If anyone would do so, or let me have access to such a deployment, please let me know)
    - This script has been tested with a co location of all databeses. If you require it to backup your Monitoring/archiving databases from seperate SQL servers, you must add these sources to the script.
    - The script should be able to run without any modification or input, unless you want to use other paths than I have entered.
    - The script must be run on a server where Lync PS is available.
    - If the script must be run in a PS3 environment, and will load all nessecary modules automatically
    - My script creates a directory C:\lyncbackup\, this may be edited if you like.
    - Certificates will only be backed up if you allowed for this when requesting and creating certificates.
    - Certificate backup is only done on the machine where the script is run
    - The creation of the zipfile can take a while. The script finishes before the zipfile is finished (If anyone know how to wait for this task before quitting the script, please let me know).
    - I highly recommend you test the script in your Lab, before running in your production environment



    V 1.0 - July 2012 - Created for Standard Edition
    V 1.1 - August 2012 - added a cleanup rutine, and zip rutine
    V 1.2 - October 2012 - Completed for Enterprise Edition
    V 2.0 - March 2013 - Edited for a Lync 2013 environment.
.EXAMPLE
   Backupscript - Enterprise EDT v2 (Lync 2013).ps1
   #>

$date = "{0:yyyy_MM_dd-HH_mm}" -f (get-date)

#################################################################
#
# Getting Lync pool information
#
#################################################################

$sysinfo = Get-WmiObject -Class Win32_ComputerSystem
$fqdnLyncReal = “{0}.{1}” -f $sysinfo.Name, $sysinfo.Domain
$fqdnLyncpool = Get-CsService -CentralManagement | Select-Object PoolFqdn
$fqdnLync = $fqdnLyncpool.PoolFqdn.tolower()

#################################################################
#
# This will store Backup in C:\lyncbackup\
#
# Setting File and share paths
# Defining filenames
#
# Edit these to for automation as you please
#
#################################################################


[system.Console]::ForegroundColor = [System.ConsoleColor]::Yellow
$filepath = "c:\lyncbackup\"
$filepathshare = "c:\lyncbackup"
$fileshare = Get-CsService -FileStore | Select-Object UncPath
$filesharepath = $fileshare.UncPath.tolower()

$filepath1 = $filepath + $date
$filepath2 = $filepath1 + "\FileshareData"
$filepath3 = $filepath1 + "\SQLBU"

$backupfile1 = $filepath1 + "\CsConfiguration.zip"
$backupfile10 = $filepath1 + "\RGSConfiguration.zip"
$backupfile11 = $filepath + "\BACKUP " + $date +".zip"
$backupfile12 = $filepath1 + "\Topology " + $date +".xml"
$backupfile13 = $filepath1 + "\UserData.zip"
$backupfile14 = $filepath1 + "\PersistantChatData.zip"
$backupfile2 = $filepath1 + "\CsLISconfiguration.bak"
$backupfile3 = $filepath1 + "\dbimpexp.xml"
$backupfile4 = $filepath1 + "\DialPlan.xml"
$backupfile5 = $filepath1 + "\VoicePolicy.xml"
$backupfile6 = $filepath1 + "\VoiceRoute.xml"
$backupfile7 = $filepath1 + "\PSTNUsage.xml"
$backupfile8 = $filepath1 + "\VoiceConfiguration.xml"
$backupfile9 = $filepath1 + "\TrunkConfiguration.xml"

$logfile = "c:\Backup_run_" + $date +".log"

$fileshare = "\\" + $fqdnLyncReal + "\lyncbackup"
$backuproot = $fileshare + "\" + $date + "\SQLBU"

Start-Transcript -Path $logfile -Append

Write-Output ("Script started at: " + $date);

New-Item $filepath -type directory -force -Verbose
New-Item $filepath1 -type directory -force -Verbose
New-Item $filepath2 -type directory -force -Verbose
New-Item $filepath3 -type directory -force -Verbose

#################################################################
#
# Creating a fileShare with everyone rigths
# If you already have provisioned a share, where you SQL_service user have full controll over,
# You may skip this.
#
#################################################################

NET SHARE lyncbackup=$filepathshare "/GRANT:Everyone,FULL"

#################################################################
#
# Delete all Files in $filepath older than 5 day(s)
#
#################################################################

$Days = "-5"
$CurrentDate = Get-Date
$DatetoDelete = $CurrentDate.AddDays($Days)
Get-ChildItem $filepath -recurse | Where-Object { $_.LastWriteTime -lt $DatetoDelete } | Remove-Item -Verbose

#################################################################
#
# Exporting your Microsoft Lync Server 2013 topology, policies, and configuration settings to a file.
#
#################################################################

export-csconfiguration -filename $backupfile1 -Verbose

#################################################################
#
# Creating a backup of your topology as an XML file
#
#################################################################

(Get-CsTopology -AsXml).ToString() > $backupfile12

#################################################################
#
# Exports an Enterprise Voice Enhanced 9-1-1 (E9-1-1) configuration to a file in compressed format for backup purposes.
#
#################################################################

export-cslisconfiguration -filename $backupfile2 -Verbose

#################################################################
#
# Exports RGS configuration to a file in compressed format for backup purposes.
#
#################################################################

Export-CsRgsConfiguration -source ApplicationServer:$fqdnLync -FileName $backupfile10 -Verbose

#################################################################
#
# Export User information
#
#################################################################

Export-CsUserData -PoolFqdn $fqdnLync -FileName $backupfile13 -Verbose

#################################################################
#
# Use Xcopy to create copy from fileshare
#
#################################################################

net use y: $filesharepath
cd y:
Xcopy *.* $filepath2 /E /I /Y /H /C
cd $filepath
net use y: /delete

#################################################################
#
# Backing up some of the vital policies and settings
#
#################################################################

Get-CsDialPlan | Export-Clixml -path $backupfile4 -Verbose
Get-CsVoicePolicy | Export-Clixml -path $backupfile5 -Verbose
Get-CsVoiceRoute | Export-Clixml -path $backupfile6 -Verbose
Get-CsPstnUsage | Export-Clixml -path $backupfile7 -Verbose
Get-CsVoiceConfiguration | Export-Clixml -path $backupfile8 -Verbose
Get-CsTrunkConfiguration | Export-Clixml -path $backupfile9 -Verbose

#################################################################
#
# I ran into some file rights issues when backing up the SQL
# Setting ACL on the target forlder of the SQL Backup
# Should not impose any security threat, as the share is removed in the end
#
#################################################################

$Acl = Get-Acl $filepath3
$Ar = New-Object  system.security.accesscontrol.filesystemaccessrule("Everyone","FullControl","ContainerInherit, ObjectInherit", "None","Allow")
$Acl.SetAccessRule($Ar)
Set-Acl $filepath3 $Acl

#################################################################
#
# Backing up SQL
#
#################################################################

Import-Module SQLPS -DisableNameChecking
$SQLInstance = Get-CsConfigurationStoreLocation
$SQLFQDN = Get-CsService -CentralManagementdatabase | Select-Object PoolFqdn
$InstanceSQL = Get-CsService -CentralManagementDatabase | Select-Object SqlInstanceName
$instancenamesql = $InstanceSQL.SqlInstanceName.toupper()
$SQLServer = $SQLFQDN.PoolFqdn.toupper() 
$Server = $SQLInstance;     # SQL Server Instance.
$inst=$null
$Dest = $backuproot;    # Backup path on server (optional). 
$ServerName = $sysinfo.Name.tostring() 
[void][System.Reflection.Assembly]::LoadWithPartialName('Microsoft.SqlServer.ConnectionInfo');           
[void][System.Reflection.Assembly]::LoadWithPartialName('Microsoft.SqlServer.Management.Sdk.Sfc');           
[void][System.Reflection.Assembly]::LoadWithPartialName('Microsoft.SqlServer.SMO');           
# Requiered for SQL Server 2008 (SMO 10.0).           
[void][System.Reflection.Assembly]::LoadWithPartialName('Microsoft.SqlServer.SMOExtended');

cd SQLSERVER:\SQL\$SQLServer\$instancenamesql\Databases

#start full backups
$cdate = Get-Date -Format MMddyy
foreach($database in (Get-ChildItem -name -force)) {
$dbName = $database
$bakFile = $dest + "\" + $dbName + "_full_" + $cdate + ".bak"
If($dbName -ne "tempdb"){
Backup-SqlDatabase -Database $dbName -BackupFile $bakFile -Initialize -verbose }}

#################################################################
#
# Export Persistant Chat 
# This part of the script will be updated once I can verify it
#
#################################################################

#$SQLInstance = Get-CsConfigurationStoreLocation | Select-Object BackEndServer
#$PersistandBU = $SQLInstance.BackEndServer.ToLower()
#Export-CsPersistentChatData -DBInstance $PersistandBU -FileName $backupfile14

#################################################################
#
# Backing up CERT of local computer
#
#################################################################

dir cert:\localmachine\my |
      Where-Object { $_.HasPrivateKey -and $_.PrivateKey.CspKeyContainerInfo.Exportable } |
      Foreach-Object { [system.IO.file]::WriteAllBytes(
               $filepath1 + "\$($_.thumbprint).pfx",
               ($_.Export('PFX', 'secret')) ) }
#################################################################
#             
# Create the final ZIP file
#
#################################################################
  
Set-Content $backupfile11 ("PK" + [char]5 + [char]6 + ("$([char]0)" * 18))
$File = Get-ChildItem $backupfile11 -ErrorAction SilentlyContinue
$File = (New-Object -COM Shell.Application).Namespace($File.FullName)
$File.CopyHere($filepath1, 4)

c:
cd \
NET SHARE lyncbackup /y /delete

#write-host "Your backupfile is now storing as $backupfile11"
Write-Output ("Finished at: " + (Get-Date -format  yyyy-MM-dd-HH:mm:ss) + "A logfile has been created as " + $logfile);
Stop-Transcript
[system.Console]::ForegroundColor = [System.ConsoleColor]::White


728x90
728x90

Skype For Business Front-End EnterPrise 배포

 

  1. Front-End 사전 역할 및 기능 설치

Add-WindowsFeature NET-Framework-Core, RSAT-ADDS, Windows-Identity-Foundation, Web-Server, Web-Static-Content, Web-Default-Doc, Web-Http-Errors, Web-Dir-Browsing, Web-Asp-Net, Web-Net-Ext, Web-ISAPI-Ext, Web-ISAPI-Filter, Web-Http-Logging, Web-Log-Libraries, Web-Request-Monitor, Web-Http-Tracing, Web-Basic-Auth, Web-Windows-Auth, Web-Client-Auth, Web-Filtering, Web-Stat-Compression, Web-Dyn-Compression, NET-WCF-HTTP-Activation45, Web-Asp-Net45, Web-Mgmt-Tools, Web-Scripting-Tools, Web-Mgmt-Compat, Server-Media-Foundation, BITS

   

  1. 재부팅
  2. SFB 관리 도구 설치

       

       

       

    Install Administrative Tools

       

  3. Active Directory 사전 요구사항 설치

    Prepare Active Directory 선택

       

    Step1 실행

       

       

       

    Step2 실행

       

    Step3 실행

       

       

       

       

    Skype4Bussiness 관리 쉘을 열어 아래와 같은 결과가 나오면 복제가 완료 됨.

       

    CSAdministrator에 서비스관리자 계정 추가

       

       

       

       

  4. Topology Builder 구성

    Primary SIP domain 입력

       

    추가 sip domain이 있다면 입력해줍니다. 없어서 패스

       

    Site 이름 입력

       

       

       

       

    전 엔터프라이즈를 Pool FQDN 정의

       

    Front-End Server 추가

       

    PSTN 연동은 없으므로 Pass

       

    IP-PBX 연동 없으므로 체크 해제

       

    내부만 배포하므로 체크해제(나중에 Edge 배포는 별도로 올리겠습니다.)

       

    SFB.Koreare.com\SFBDB(MSCS 구성) Back-End SQL Server 지정


    Skype For Business 공유 폴더 지정(클러스터 파일서버 지정)

       

    내부/외부 웹사이즈 정의

       

    Office Web Apps Server FQDN 지정

       

       

    Archiving DB 지정

       

    Monitoring DB 지정

       

    Topology 설정 완료

       

  5. Admin Access URL 및 CMS Pool 지정

       

    게시

       

       

       

    다음과 같이 오류가 나올경우 아래를 보고 따라하세용

       

    아래와 같이 오류가 났다. 원인은 1433,1434(UDP) 포트가 오픈 되어이어야 한다.

       

       

InstallDatabaseCmdlet.CreateDatabaseForFeature 2016-03-15 오후 5:39:49 Completed with warnings

   

Feature: ApplicationStore 2016-03-15 오후 5:39:49

SQL Instance: SFBDB.koreare.com\SFBDB 2016-03-15 오후 5:39:49

Collocated: False 2016-03-15 오후 5:39:49

Found "RTCComponentUniversalServices": True 2016-03-15 오후 5:39:49

Found "RTCUniversalServerAdmins": True 2016-03-15 오후 5:39:49

Found "RTCUniversalReadOnlyAdmins": True 2016-03-15 오후 5:39:49

Warning: Setting SQL Server Show Advanced Options to 1 2016-03-15 오후 5:40:03 Warning

Warning: Setting SQL Server Recover Interval to 5 mins 2016-03-15 오후 5:40:03 Warning

Found "RTCComponentUniversalServices": True 2016-03-15 오후 5:40:12

Found "RTCUniversalServerAdmins": True 2016-03-15 오후 5:40:12

Found "RTCUniversalReadOnlyAdmins": True 2016-03-15 오후 5:40:12

Warning: Setting SQL Server Show Advanced Options to 1 2016-03-15 오후 5:40:26 Warning

Warning: Setting SQL Server Recover Interval to 5 mins. 2016-03-15 오후 5:40:26 Warning

Found "RTCComponentUniversalServices": True 2016-03-15 오후 5:40:32

Found "RTCUniversalServerAdmins": True 2016-03-15 오후 5:40:32

Found "RTCUniversalReadOnlyAdmins": True 2016-03-15 오후 5:40:32

Warning: Setting SQL Server Show Advanced Options to 1 2016-03-15 오후 5:40:44 Warning

Warning: Setting SQL Server Recover Interval to 5 mins. 2016-03-15 오후 5:40:44 Warning

Log file: C:\Users\administrator.KOREARE\AppData\Local\Temp\2\Create-ApplicationStore-SFBDB.koreare.com_SFBDB-[2016_03_15][17_39_49].log 2016-03-15 오후 5:40:48

   

InstallDatabaseCmdlet.CreateDatabaseForFeature 2016-03-15 오후 5:40:48 Completed with warnings

   

Feature: ArchivingStore 2016-03-15 오후 5:40:48

SQL Instance: SFBDB.koreare.com\SFBDB 2016-03-15 오후 5:40:48

Collocated: False 2016-03-15 오후 5:40:48

Found "RTCComponentUniversalServices": True 2016-03-15 오후 5:40:48

Warning: SQL Server Agent start mode was detected as Manual. It must be Auto to ensure that jobs are executed. 2016-03-15 오후 5:41:38 Warning

Log file: C:\Users\administrator.KOREARE\AppData\Local\Temp\2\Create-ArchivingStore-SFBDB.koreare.com_SFBDB-[2016_03_15][17_40_48].log 2016-03-15 오후 5:41:42

   

InstallDatabaseCmdlet.CreateDatabaseForFeature 2016-03-15 오후 5:41:42 Completed with warnings

   

Feature: MonitoringStore 2016-03-15 오후 5:41:42

SQL Instance: SFBDB.koreare.com\SFBDB 2016-03-15 오후 5:41:42

Collocated: False 2016-03-15 오후 5:41:42

Found "RTCComponentUniversalServices": True 2016-03-15 오후 5:41:42

Found "CsAdministrator": True 2016-03-15 오후 5:41:42

Found "CSViewOnlyAdministrator": True 2016-03-15 오후 5:41:42

Found "CSServerAdministrator": True 2016-03-15 오후 5:41:42

Warning: SQL Server Agent start mode was detected as Manual. It must be Auto to ensure that jobs are executed. 2016-03-15 오후 5:42:36 Warning

Found "RTCComponentUniversalServices": True 2016-03-15 오후 5:42:37

Warning: SQL Server Agent start mode was detected as Manual. It must be Auto to ensure that jobs are executed. 2016-03-15 오후 5:43:30 Warning

Log file: C:\Users\administrator.KOREARE\AppData\Local\Temp\2\Create-MonitoringStore-SFBDB.koreare.com_SFBDB-[2016_03_15][17_41_42].log 2016-03-15 오후 5:43:31

   

  1. 인증서 생성

[Version]

Signature="$Windows NT$"

[NewRequest]

Subject = "CN=Pool01.koreare.com"

Exportable = true

ExportableEncrypted = true

HashAlgorithm = sha256

KeyLength = 4096

KeySpec = AT_KEYEXCHANGE

KeyUsage = "CERT_DIGITAL_SIGNATURE_KEY_USAGE | CERT_KEY_ENCIPHERMENT_KEY_USAGE"

KeyUsageProperty = "NCRYPT_ALLOW_DECRYPT_FLAG | NCRYPT_ALLOW_SIGNING_FLAG"

MachineKeySet = true

ProviderName = "Microsoft RSA SChannel Cryptographic Provider"

ProviderType = 12

SMIME = false

RequestType = CMC

FriendlyName = "Pool01.koreare.com"

[Extensions]

2.5.29.17 = "{text}"

_continue_ = "dns=Pool01.koreare.com&"

_continue_ = "dns=sfbintweb.koreare.com&"

_continue_ = "dns=sfbextweb.koreare.com&"

_continue_ = "dns=meet.koreare.com&"

_continue_ = "dns=sfb01.koreare.com&"

_continue_ = "dns=sfb02.koreare.com&"

_continue_ = "dns=ucupdates.koreare.com&"

_continue_ = "dns=sip.koreare.com&"

_continue_ = "dns=dialin.koreare.com&"

_continue_ = "dns=webscheduler.koreare.com&"

_continue_ = "dns=sfbadmin.koreare.com&"

_continue_ = "dns=lyncdiscover.koreare.com&"

_continue_ = "dns=lyncdiscoverinternal.koreare.com"

 

2.5.29.37 = "{text}"

_continue_ = "1.3.6.1.5.5.7.3.2,"

_continue_ = "1.3.6.1.5.5.7.3.1"

   

  1. Install or Update Skype for Business Server System

먼저 RTCUniversalServerAdmin 그룹에 권한 등록

   

   

   

   

   

   

   

아래와 같이 오류가 났다. KB2982006 핫픽스 설치 해야 한다.

대략적인 내용은 IIS Crash에 대한 핫픽스 인듯하다.

https://support.microsoft.com/en-us/kb/2982006

   

Hotfix 설치

   

   

Back버튼을 눌러 다시 실행 해줍니다.

   

Add feature to list of intended features 2016-03-16 오전 8:45:05 Success

   

Feature: Feature_FTA 2016-03-16 오전 8:45:05

Contained in MSI: MgmtServer.msi 2016-03-16 오전 8:45:05

Requires: Feature_MGMTServer 2016-03-16 오전 8:45:05

   

Add feature to list of intended features 2016-03-16 오전 8:45:05 Success

   

Feature: Feature_MGMTServer 2016-03-16 오전 8:45:05

Contained in MSI: MgmtServer.msi 2016-03-16 오전 8:45:05

Prerequisite: SupportedServerOS 2016-03-16 오전 8:45:05

Requires: Feature_LocalMgmtStore 2016-03-16 오전 8:45:05

   

Add feature to list of intended features 2016-03-16 오전 8:45:05 Success

   

Feature: Feature_LocalMgmtStore 2016-03-16 오전 8:45:05

Contained in MSI: OcsCore.msi 2016-03-16 오전 8:45:05

Prerequisite: SupportedOS 2016-03-16 오전 8:45:05

Prerequisite: SupportedOSNoDC 2016-03-16 오전 8:45:05

Prerequisite: DotNet35 2016-03-16 오전 8:45:05

Prerequisite: SqlUpgradeInstanceRtcLocal 2016-03-16 오전 8:45:05

Prerequisite: SupportedSqlRtcLocal 2016-03-16 오전 8:45:05

Prerequisite: SqlInstanceRtcLocal 2016-03-16 오전 8:45:05

Requires: Feature_OcsCore 2016-03-16 오전 8:45:05

   

Add feature to list of intended features 2016-03-16 오전 8:45:05 Success

   

Feature: Feature_OcsCore 2016-03-16 오전 8:45:05

Contained in MSI: OcsCore.msi 2016-03-16 오전 8:45:05

Prerequisite: WMIEnabled 2016-03-16 오전 8:45:05

Prerequisite: NoOtherVersionInstalled 2016-03-16 오전 8:45:05

Prerequisite: SupportedOS 2016-03-16 오전 8:45:05

Prerequisite: PowerShell 2016-03-16 오전 8:45:05

Prerequisite: VCredist 2016-03-16 오전 8:45:05

Prerequisite: SqlNativeClient 2016-03-16 오전 8:45:05

Prerequisite: SqlClrTypes 2016-03-16 오전 8:45:05

Prerequisite: SqlSharedManagementObjects 2016-03-16 오전 8:45:05

Prerequisite: RemoveOldUcmaWorkflow 2016-03-16 오전 8:45:05

Prerequisite: RemoveOldUcmaRedist 2016-03-16 오전 8:45:05

Prerequisite: UcmaRedist 2016-03-16 오전 8:45:05

   

Role discovered: CMSMaster 2016-03-16 오전 8:45:05

Role discovered: CMSFileTransfer 2016-03-16 오전 8:45:05

Warning: Warning: Not all machines in the current pool appear to be running the same version of Windows Server. This configuration is not supported and will break communication between machines in the pool. Please check that the following machines are all running the same version of Windows Server: 2016-03-16 오전 8:45:05 Warning

Warning: FQDN: sfb01.koreare.com Version: 6.3.9600 2016-03-16 오전 8:45:05 Warning

Warning: FQDN: sfb02.koreare.com Version: Machine inaccessible 2016-03-16 오전 8:45:05 Warning

   

   

   

   

   

   

   

   

   

   

   

   

   

   

재시작

   

서비스 상태 확인

   

  1. 관리자 웹페이지 접속

실버라이트 설치가 필요하다.

   

   

사용자 추가

   

   

   

  1. 클라이언트 접속 확인

사용자 아이비 화면

   

사용자 아이유 화면

   

끝.

728x90
728x90

With the first release of an update for Skype for Business 2015, it is a good opportunity to publish a list of Cumulative Updates. We will try to keep it updated as soon as a new Cumulative Update is released.

Like in the previous versions, this list will include the version for the Core Components. This is because not all components are updated when we apply a Cumulative Update.

The previous lists for the Lync Server can be found in the following links:

Lync Server 2010 Cumulative Update List

Lync Server 2013 Cumulative Update List

We already made a post on how to check the component version using PowerShell:

Skype for Business Server 2015 Component Version using PowerShell

The latest updates for Skype for Business 2015 and how to update each server role is described here:

Updates for Skype for Business Server 2015

Here is the table with the list of updates:

VersionCumulative UpdateKB Article
6.0.9319.102November 2015http://support.microsoft.com/kb/3097645
6.0.9319.88September 2015http://support.microsoft.com/kb/3098601
6.0.9319.55June 2015http://support.microsoft.com/kb/3061059
6.0.9319.0RTMNA


728x90

+ Recent posts