The UC Guy http://theucguy.net Notes on Exchange, Lync & Office 365 - Rajith Enchiparambil Sun, 01 Jun 2014 17:24:08 +0000 en-US hourly 1 http://wordpress.org/?v=260 Cannot Install Windows Azure AD Module For PowerShell On Windows 8 & 2012http://theucguy.net/install-azure-ad-module-windows-8/?utm_source=rss&utm_medium=rss&utm_campaign=install-azure-ad-module-windows-8 http://theucguy.net/install-azure-ad-module-windows-8/#comments Sun, 01 Jun 2014 05:09:00 +0000 http://theucguy.net/?p=3352 Installing the Windows Azure AD module for managing Office 365 goes fine when the workstation is Windows 7. But, you will be in for a surprise if you try to install the module on Windows 8 or 2012. You need the Microsoft Sign In Assistant 7.0 installed before trying to install the powershell module. But […]

The post Cannot Install Windows Azure AD Module For PowerShell On Windows 8 & 2012 appeared first on The UC Guy.

]]>
Installing the Windows Azure AD module for managing Office 365 goes fine when the workstation is Windows 7. But, you will be in for a surprise if you try to install the module on Windows 8 or 2012.

You need the Microsoft Sign In Assistant 7.0 installed before trying to install the powershell module. But even after installing the sign in assistant, the Azure AD module installation will complain that you don’t have the pre-requisites met! The exact error is “In order to install Windows Azure Active Directory Module for Windows PowerShell, you must have Microsoft Online Services Sign-In Assistant version 7.0 or greater installed on this computer”.

Azure AD module error There are two ways to get around this issue.

1. You can install the Beta version of Microsoft Sign In Assistant for IT Professionals. The beta version is newer than the RTM one, which is used normally. Having the word Beta at the end of the name will raise issues while trying to get it into production servers in medium to large organizations. If you are a small shop, things will be much more easier. The beta version is 7.250.4551.0 while the RTM is 7.250.4303.0. If you are not upset about installing the newer BETA release, download it here.

2. Another workaround is to “trick” the Azure AD module installer to think that it has the beta version on the machine, while only installing the RTM one. Follow the steps below. Open notepad and paste in the lines below.

Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSOIdentityCRL] “MSOIDCRLVersion”=”7.250.4551.0″ “MSOIDCRLVersion_Default”=”7.250.4303.0″

Save the file with a .reg extension. I will call it Fix.reg Once it is saved, double click the file so that the registry changes are made. Registry edit to fix the Azure AD module installation Your Azure AD module install should go through fine after that. You can undo the registry changes after installing by saving the following as a .reg file and double clicking it.

Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSOIdentityCRL] “MSOIDCRLVersion”=”7.250.4303.0″ “MSOIDCRLVersion_Default”=”7.250.4303.0″

The post Cannot Install Windows Azure AD Module For PowerShell On Windows 8 & 2012 appeared first on The UC Guy.

]]>
http://theucguy.net/install-azure-ad-module-windows-8/feed/ 0
Exchange 2013 CU5http://theucguy.net/exchange-2013-cu5/?utm_source=rss&utm_medium=rss&utm_campaign=exchange-2013-cu5 http://theucguy.net/exchange-2013-cu5/#comments Sat, 31 May 2014 22:34:00 +0000 http://theucguy.net/?p=3346 Microsoft has released cumulative update 5 for Exchange 2013. As usual, the CUs are full builds. Hence, you don’t have to install 2013 SP1 (which is also CU4) first. This update also needs an AD schema update and hence a proper plan should be in place for medium to large organizations where the AD schema […]

The post Exchange 2013 CU5 appeared first on The UC Guy.

]]>
Microsoft has released cumulative update 5 for Exchange 2013.

As usual, the CUs are full builds. Hence, you don’t have to install 2013 SP1 (which is also CU4) first. This update also needs an AD schema update and hence a proper plan should be in place for medium to large organizations where the AD schema changes will have to be tested thoroughly & approved by various teams before giving the go ahead for the CU5 deployment.

Exchange 2013 CU5

Download the Cumulative Update 5 here.

The post Exchange 2013 CU5 appeared first on The UC Guy.

]]>
http://theucguy.net/exchange-2013-cu5/feed/ 2
Invalid Token Error While Importing RSA Software Token To BlackBerryhttp://theucguy.net/invalid-token-error-rsa-token-blackberry/?utm_source=rss&utm_medium=rss&utm_campaign=invalid-token-error-rsa-token-blackberry http://theucguy.net/invalid-token-error-rsa-token-blackberry/#comments Tue, 13 May 2014 22:08:45 +0000 http://theucguy.net/?p=3342 I came across a strange issue while setting up RSA software tokens for blackberry handhelds – Invalid Token error while trying to import. The user has his mailbox in Office 365 (hybrid deployment) and makes use of the Blackberry cloud services for Office 365. While setting up the RSA software token, I was able to […]

The post Invalid Token Error While Importing RSA Software Token To BlackBerry appeared first on The UC Guy.

]]>
I came across a strange issue while setting up RSA software tokens for blackberry handhelds – Invalid Token error while trying to import.

The user has his mailbox in Office 365 (hybrid deployment) and makes use of the Blackberry cloud services for Office 365.

While setting up the RSA software token, I was able to generate a token and send it to the user’s blackberry via email.

But, when I select the attachment (token file which has an extension of “sdtid”), the import fails with the error that the “Invalid token, import failed. Contact your administrator”.

The tokens get downloaded from the RSA security console as a zip file, but I extracted the token file and sent that via email – No luck.

The issue was that for the blackberry handheld to recognize the attachment as a token file, it needs a prefix “x-rimdevice-“ on the token file name.

For example, if the token generated has a name Rajith_003272.sdtid, the file has to be renamed to x-rimdevice-Rajith_003272.sdtid before it is sent to the user’s inbox.

Once the “correct” file name was used, the handheld picked it up as a token file and imported successfully. Not may use software RSA token, but hopefully this will help someone trying to configure it ;)

The post Invalid Token Error While Importing RSA Software Token To BlackBerry appeared first on The UC Guy.

]]>
http://theucguy.net/invalid-token-error-rsa-token-blackberry/feed/ 0
Update Exchange Help In Shellhttp://theucguy.net/update-exchange-help-shell/?utm_source=rss&utm_medium=rss&utm_campaign=update-exchange-help-shell http://theucguy.net/update-exchange-help-shell/#comments Mon, 12 May 2014 21:37:00 +0000 http://theucguy.net/?p=3341 In previous versions of Exchange, there was always a difference between the help info on TechNet and the one displayed in the local shell window. This has been changed from Exchange 2013 CU2+ The local cmdlet help was only updated with new CUs and service packs. But from 2013 CU2+ onwards, an administrator can update […]

The post Update Exchange Help In Shell appeared first on The UC Guy.

]]>
In previous versions of Exchange, there was always a difference between the help info on TechNet and the one displayed in the local shell window. This has been changed from Exchange 2013 CU2+

The local cmdlet help was only updated with new CUs and service packs. But from 2013 CU2+ onwards, an administrator can update the local help as and when they want – to synchronize it with the latest changes published in TechNet.

All you need is an Exchange box with an internet connection. Run the “Update-ExchangeHelp” cmdlet from the shell and the latest help files will be downloaded from the internet.

Running this cmdlet on my machine running Exchange 2013 SP1 was very quick, as the local help is pretty much up-to-date.

Update-ExchangeHelp

You can use the same technique to update all the Windows PowerShell specific cmdlets and modules help. The command to run is Update-Help.

It took about 30seconds for the help to update on my brand new Windows 2012 R2 box.

Update-Help in Powershell

Update-Help in Powershell continued

The post Update Exchange Help In Shell appeared first on The UC Guy.

]]>
http://theucguy.net/update-exchange-help-shell/feed/ 0
Testing Office 365 Hybrid Deployment For Freehttp://theucguy.net/testing-office-365-hybrid-deployment-for-free/?utm_source=rss&utm_medium=rss&utm_campaign=testing-office-365-hybrid-deployment-for-free http://theucguy.net/testing-office-365-hybrid-deployment-for-free/#comments Sun, 11 May 2014 21:00:00 +0000 http://theucguy.net/?p=3337 Ever wondered how to setup an Office 365 hybrid deployment for free – maybe to learn or as a proof of concept exercise? If the answer is yes, you can do it for free (pretty much) with trials from Azure, Office 365 and third party certificate providers. You will need to register your domain with […]

The post Testing Office 365 Hybrid Deployment For Free appeared first on The UC Guy.

]]>
Ever wondered how to setup an Office 365 hybrid deployment for free – maybe to learn or as a proof of concept exercise?

If the answer is yes, you can do it for free (pretty much) with trials from Azure, Office 365 and third party certificate providers.

You will need to register your domain with one of the hosting providers like GoDaddy. It will only cost a couple of dollars.

Azure gives a one month free trial and you can setup your lab environment online – domain controller, exchange, dirsync servers, the whole lot. Do shutdown the machines when you are not using them as you have a set amount of credit available during trial.

Azure one month trial offer

Sign up for the one month Azure trial here.

You need an Office 365 subscription, after all you are trying to deploy a hybrid config. Even if you just want to familiarize with the cloud, you can sign up for the one month trial. If your intention is to deploy a hybrid lab, sign up for the one month E3 plan trial.

Office 365 trial E3 plan

Sign up for E3 subscription trial here.

We need SSL certificate to configure the hybrid deployment. Most of the famous third party certificate providers offer you free certs for a month or more. Sign up for one of those.

StartSSL provides free certificates.

Comodo provides free certificate valid for 3 months. Get it here.

Check with other providers like DIgiCert to see whether they do something similar. You never know ;)

The post Testing Office 365 Hybrid Deployment For Free appeared first on The UC Guy.

]]>
http://theucguy.net/testing-office-365-hybrid-deployment-for-free/feed/ 0
Office 365 Object Limitshttp://theucguy.net/office-365-object-limits/?utm_source=rss&utm_medium=rss&utm_campaign=office-365-object-limits http://theucguy.net/office-365-object-limits/#comments Sat, 10 May 2014 20:24:00 +0000 http://theucguy.net/?p=3334 A question that comes up in forums very often is about the object limits in Office 365. The limitations are different based on where you are with your deployment. Following are the points to note. If you only have the default something.onmicrosoft.com domain in Office 365 portal, you can sync a maximum of 50,000 objects. […]

The post Office 365 Object Limits appeared first on The UC Guy.

]]>
A question that comes up in forums very often is about the object limits in Office 365.

The limitations are different based on where you are with your deployment. Following are the points to note.

If you only have the default something.onmicrosoft.com domain in Office 365 portal, you can sync a maximum of 50,000 objects. This includes users, groups and contacts.

If you only have the default something.onmicrosoft.com domain in Office 365 portal and want to sync more than 50K objects, you need to contact Azure AD support team who can increase the limit.

If you have a vanity domain (say yourcompanydomain.com) in Office 365 portal, your 50K limit is automatically increased to 300,000 objects. You DO NOT have to contact the support team for this. The limit is increased automatically once the domain is verified.

If you have a vanity domain (say yourcompanydomain.com) in Office 365 portal and you want to sync more than 300K objects, you need to contact the Azure AD support team to increase the limit.

Only one increase per tenant is allowed.

Any deleted objects in Office 365 (whether it is pure 0365 or on-premise AD sync’d ones) are retained for 30 days by default and this will be taken into account when the object limit is calculated. For example, if you have deleted 100 users, you can sync 49,900 or 299,900 objects to Office 365 as the case may be.

You can purge the deleted users completely using PowerShell, rather than waiting for the default object retention period of 30 days.

The post Office 365 Object Limits appeared first on The UC Guy.

]]>
http://theucguy.net/office-365-object-limits/feed/ 0
DirSync (WAAD) Access Denied In Configuration Wizardhttp://theucguy.net/dirsync-waad-access-denied-configuration-wizard/?utm_source=rss&utm_medium=rss&utm_campaign=dirsync-waad-access-denied-configuration-wizard http://theucguy.net/dirsync-waad-access-denied-configuration-wizard/#comments Fri, 09 May 2014 18:30:00 +0000 http://theucguy.net/?p=3333 How to solve access denied error while configuring DirSync with the wizard? I ran into the following issue while setting up DirSync (WAAD) tool. I installed the latest DirSync tool and when running the configuration wizard, it asked for an Office365 and an on-premise admin account credentials and accepted both of them. The wizard got […]

The post DirSync (WAAD) Access Denied In Configuration Wizard appeared first on The UC Guy.

]]>
How to solve access denied error while configuring DirSync with the wizard?

I ran into the following issue while setting up DirSync (WAAD) tool.

I installed the latest DirSync tool and when running the configuration wizard, it asked for an Office365 and an on-premise admin account credentials and accepted both of them. The wizard got to the “Configuration” stage and ultimately error’d out with the “Access is denied” message. The only buttons available were “Retry” and “Cancel”.

DirSync Access Denied

There are two things to check to fix this issue.

As I was installing DirSync on the domain controller (yes, it is supported), I ran the configuration wizard straight after the install as prompted.

Configure DirSync tool

You should uncheck the box and click “Finish”. Then log off from the server and log back in. This ensures that only the least AD permissions are configured. The log off is only required if you install DirSync (WAAD) on a domain controller.

Second point to check is whether the on-premise AD account that you use in the configuration wizard is a member of the “FIMSyncAdmins” AD group. If not, add the user to the group, wait for the replication and run the wizard again.

And voila! ;)

DirSync config complete

The post DirSync (WAAD) Access Denied In Configuration Wizard appeared first on The UC Guy.

]]>
http://theucguy.net/dirsync-waad-access-denied-configuration-wizard/feed/ 0
DirSync (WAAD Sync) For Office 365 – Factshttp://theucguy.net/dirsync-waad-office-365/?utm_source=rss&utm_medium=rss&utm_campaign=dirsync-waad-office-365 http://theucguy.net/dirsync-waad-office-365/#comments Thu, 08 May 2014 22:56:00 +0000 http://theucguy.net/?p=3329 There is lot of confusion regarding DirSync (the new Windows Azure Active Directory Sync) tool. Following are the points to note when setting up & configuring the tool. Yes, you can install DirSync on a domain controller now. The DC should be running Windows 2008+ as the base operating system. Do use the latest binaries […]

The post DirSync (WAAD Sync) For Office 365 – Facts appeared first on The UC Guy.

]]>
There is lot of confusion regarding DirSync (the new Windows Azure Active Directory Sync) tool.

Following are the points to note when setting up & configuring the tool.

  • Yes, you can install DirSync on a domain controller now. The DC should be running Windows 2008+ as the base operating system. Do use the latest binaries though.
  • The recommendation is still to have DirSync on a member server, although DC install is supported.
  • If you have more than 50,000 objects (users, groups, contacts) to sync to Office 365, you should have DirSync installed with a full blown SQL as the database backend.
  • The default installation of the DirSync tool includes a version of Microsoft SQL Server 2012 Express SP1 and you can use this mode of install if you have less than 50,000 objects.
  • You can go with a flown blown SQL as the backend even if you have less than 50K objects (optional).
  • You can install DirSync on a Windows 2012 member server & it is supported.
  • You need to install .NET framework 3.5 SP1 & 4.0 on the server before a dirsync install is possible.
  • You can only have one install of DirSync tool between an on-premises Active Directory and an Office 365 tenant.
  • DirSync server is a single point of failure when you look from a design perspective. But, even if your DirSync server is down, your users will be able to authenticate and use all O365 services.
  • The issue will be that any new users & password changes won’t be sync’d to the O365 when the DirSync server is down.

Hope this clears the confusion ;)

The post DirSync (WAAD Sync) For Office 365 – Facts appeared first on The UC Guy.

]]>
http://theucguy.net/dirsync-waad-office-365/feed/ 0
Network Analysis For Office 365 Deploymenthttp://theucguy.net/network-analysis-office-365-deployment/?utm_source=rss&utm_medium=rss&utm_campaign=network-analysis-office-365-deployment http://theucguy.net/network-analysis-office-365-deployment/#comments Wed, 07 May 2014 22:51:00 +0000 http://theucguy.net/?p=3328 A tool to help you out in Office 365 planning & deployment. One of the steps to be carried out while planning an Office 365 migration or hybrid deployment is to analyze the network between your Exchange servers and Office 365 datacentres in your region. Luckily, Microsoft has a web based tool to analyze the […]

The post Network Analysis For Office 365 Deployment appeared first on The UC Guy.

]]>
A tool to help you out in Office 365 planning & deployment.

One of the steps to be carried out while planning an Office 365 migration or hybrid deployment is to analyze the network between your Exchange servers and Office 365 datacentres in your region.

Luckily, Microsoft has a web based tool to analyze the network traffic between the two end points for Asia, Europe and North American regions. These are the locations where Microsoft run the Office 365 datacentres.

Run the following tools based on your region.

Office 365 Network Analysis Tool

North America

Europe

Asia

The tool will give detailed information regarding various aspects of the network. First of all, the required ports for various protocols.

Ports check

Various other parameters are checked like speed, VOIP, capacity, routes etc.

Speed Checks

Do make use of the free tool.

The post Network Analysis For Office 365 Deployment appeared first on The UC Guy.

]]>
http://theucguy.net/network-analysis-office-365-deployment/feed/ 0
Switch Office 365 Planshttp://theucguy.net/switch-office-365-plans/?utm_source=rss&utm_medium=rss&utm_campaign=switch-office-365-plans http://theucguy.net/switch-office-365-plans/#comments Tue, 06 May 2014 21:46:00 +0000 http://theucguy.net/?p=3323 Office 365 is getting better & better. You can now switch plans very easily from the portal. One of the pain points for admins who were getting familiarized with Office 365 was the lack of option to move from one plan to another seamlessly. Most of the time, admins started on the wrong plan or […]

The post Switch Office 365 Plans appeared first on The UC Guy.

]]>
Office 365 is getting better & better. You can now switch plans very easily from the portal.

One of the pain points for admins who were getting familiarized with Office 365 was the lack of option to move from one plan to another seamlessly.

Most of the time, admins started on the wrong plan or as the company grew, they wanted to move to an advanced plan. The only option was to sign up for the required plan and move all users and data from the existing plans manually.

This has been addressed by the Office 365 team and you can now move from one plan to another (upwards) from your portal. Small Business subscribers can switch to both Midsize & Enterprise plans and Midsize Business subscribers can switch to Enterprise plans. You still have to contact the O365 support if you want to downgrade a plan.

In order to move to a plan higher up, login to the admin centre & navigate to Licensing -> Subscriptions.

If your plan is eligible for an upgrade, a “Switch Plans” option will be visible. Click on the option and proceed with the steps.

Switch plans in Office 365

The following happens during the switching:

  • There will be no interruption to your service and users are still able to access their data.
  • Admins will not able to use the Office 365 portal.
  • Users on your existing subscription are automatically moved to the new subscription.
  • The Office 365 licenses are reassigned and any remaining amount on the old subscription will be credited to the new plan.

The switch plan option will not be exposed if you are on a trial. If you started the trial with the wrong plan, purchase the plan and then switch to the one you need.

The post Switch Office 365 Plans appeared first on The UC Guy.

]]>
http://theucguy.net/switch-office-365-plans/feed/ 0