Windows Server

u101440 · Guest

I have an SBS 2003 Premium domain (ISA 2000 installed). The server is patched
to SP1 level and I've applied Exchnage SP2 (we've just not updated to ISA
2004 yet).

I have a member server on the domain (2003 Standard) and it's used mainly as
a testing facility for all new functionality before adding it to the SBS if
appropriate.

I've installed LCS 2005 SP1 onto this machine and it works well. I've
installed Communicator at a number of client machines and their all picking
each other up (sounds ideal) but I've got a cople of questions that I'd like
answered if possible.

The FQDN of the SBS box is sbsserv.headoffice.company.com and the FQDN of
the LCS box is testsrv01.headoffice.company.com. When a user signs onto the
domain they sign onto the SBS box (sbsserv.headoffice.company.com) but we
initally couldn't get Communicator to pick up the user for auto signon. We
had to enter the Advanced settings and change the Advanced Connection
Settings to point to the testsrv01 server. Should we need to do that or have
I missed something here?

I also note that AD on the SBS box doesn't have the LCS tab within it. This
info is only available on the testsrv01 box. Should that be the case?

I've also read that you can "import" AD entries into Communicator for users
so that they don't have to. I know there is a script in the Resources Pack
but I'm not too familiar with how to use this and I'd appreciate some clear
advise on hot that should be done.

Any help appreciated.

Bob Christian · Guest

* Regarding your first question, or what I percieve as the first question,
there are several ways to auto-configure the server that your clients
connect to.
One is through setting the configuration via Group Policy
(communicator.adm).
The second is through configuring SRV records for your domain.
Jeremy Buch and Joe Schurman have posted some good information regarding SRV
records:
http://jschurman.mvps.org/ (See the section entitled: How do DNS, SIP
Namespaces, and SIP URIs interact with LCS?)
http://groups.google.com/group/microsoft.public.livecomm.general/browse_thread/thread/17ac0f30f7e08d98/
http://groups.google.com/group/microsoft.public.livecomm.general/browse_thread/thread/8cefc81ddac65a85/

Additionally, here is a KB that can assist you with auto-population of the
sign-in name.
How to automatically populate the sign-in name for first-time users of
Windows Messenger 5.0
http://support.microsoft.com/kb/842296

* Regarding your second question, please see the following:
Question: Missing Live Communications Tab in Active Directory Users and
Computers
http://www.bobchristian.com/lcstools.html

* Regarding the third question, Ray Breen has posted some really good
information. That information can be found in the following threads:
http://groups.google.com/group/microsoft.public.livecomm.general/browse_thread/thread/8f32f16a2cac2972
http://groups.google.com/group/microsoft.public.livecomm.general/browse_thread/thread/d5b5c26a3de80186/

--
Bob Christian II
MVP - LCS
http://bobchristian.blogspot.com - Blog

"u101440" <u101440@discussions.microsoft.com> wrote in message
news:6633233B-428B-43AE-9838-CA60F6EA5BE0@microsoft.com...

u101440 · Guest

Thanx Bob.

I'll look into 1 & 2 as you suggested but I've founf Ray's post and I've
used that successfully. Didn't think it would be so easy to do this (as the
script readme appears slightly complicated to a first time user) but with
Ray's post it certainly enlightened me on how it should be done.

"Bob Christian" wrote:

u101440 · Guest

Bob

Many thanx for these great tips. One thing I'd like to ask is poss is about
the DNS entries. I'm on my SBS box (which has DNS) and I'd assume I've got to
place the DNS entries into one of the Forward Lookup Zones?

I have 2 zones at the moment:

_msdcs.headoffice.psybt.local & headoffice.psybt.local

If I've to add to one of the zones, which one would it be?

Thanx again.

"Bob Christian" wrote:

Bob Christian · Guest

headoffice.psybt.local
Don't mess with the _msdcs zone...it's for AD.

Bob

--
Bob Christian II
MVP - LCS
http://bobchristian.blogspot.com - Blog

"u101440" <u101440@discussions.microsoft.com> wrote in message
news:2A3CB734-B684-4326-B283-A0A1EBFC5C5A@microsoft.com...

u101440 · Guest

Thanx again Bob. I've looked in the headoffice.psybt.local zone and I don't
see everything I think I should! Under headoffice.psybt.local there are a
number of SRV records, one is there for my LCS Server
(testsrv01.headoffice.psybt.local). According to Joe Schrumans site I should
add the following:

1. "A" Host Record for the LCS Hosting Service - lcs.domain.com which will
point to the IP Address of a Single Standard Edition Server, a Single LCS
Pool Server, a LCS Director, or a Load Balancer.
2. DNS SRV Record for TLS by choosing TCP and then entering _SIPINTERNALTLS
for internal TLS connections. (This is new because of Communicator)
3. DNS SRV Record for TCP by choosing TCP and then entering _SIPINTERNAL for
internal TCP connections. (This is new because of Communicator)
4. DNS SRV Record for TLS by entering _TLS and then entering _SIP for
external TLS connections. (This is the same as was before for Windows
Messenger)
5. DNS SRV Record for TCP by choosing TCP and then entering _SIP for
external TCP connections. (This is the same as was before for Windows
Messenger)

I don't fully understand what I should be dong with options 2-5. Do I need
to create a record under the headoffice.psybt.local zone for each one? Could
you perhaps tell me how I should add one and then I'll be able to figure the
rest out? Under the headofice.psybt.local zone I only have the following
folders:

_sites; _tcp; _udp; DomainDnsZones; ForestDnsZones

Thanx again.

"Bob Christian" wrote:

Bob Christian · Guest

Again, do not mess with the _msdcs zone!

You want to add the SRV entries under your current zone. You will need to
manually add the SRV record. It is very similar to adding an A record,
which you may have done before.

Meni has a good site for this:
http://www.lcs-guides.com/modules.php?name=News&file=article&sid=6

Bob
--
Bob Christian II
MVP - LCS
http://bobchristian.blogspot.com - Blog

"u101440" <u101440@discussions.microsoft.com> wrote in message
news:5D64F710-68C3-44A4-882E-D72BD34E3242@microsoft.com...

u101440 · Guest

Bob, once again you've proved a great help.

"Bob Christian" wrote:

Bob Christian · Guest

Thanks for the compliments!

Bob

--
Bob Christian II
MVP - LCS
http://bobchristian.blogspot.com - Blog

"u101440" <u101440@discussions.microsoft.com> wrote in message
news:A8CF17A1-C616-4410-A500-A5B64C02E5DF@microsoft.com...

u101440 · Guest

Sorry Bob me again. I'm trying to get my certificate sorted on my domain but
I've a slight problem. My PDC is an SBS 2003 Premium machine and it has my CA
installed on it.

I'm going thru the Certificate Configuration document and following the
steps for an Enterprise CA but at step 23/24 I cannot select the new template
I've just created. It's there in my list of created templates but when I open
my selection list I get the usual suspects and cannot choose this new
template.

Does this mean I'll need to install a stand-alone CA on my LCS machine? CA
isn't installed on the LCS at the moment.

Thanx again.

"Bob Christian" wrote:

u101440 · Guest

Thanx Bob, so just to make sure, if I can install a stand-alone CA on my LCS
server would that be okay? I've only got a handful of servers but SBS does
the primary role of just about everything on the domain. My LCS is sitting
seperately as it's on a development server just now.

So can I install CA on the development server?

"Bob Christian" wrote:

Bob Christian · Guest

If I remeber correctly, SBS Premium is a Windows 2003 Standard server,
correct? Unfortunately, as you have already figured out, you will be unable
to duplicate the computer template.
If you can re-install the CA as a Standalone, without affecting your current
infrastructure, then yes.

Regards,

Bob

--
Bob Christian II
MVP - LCS
http://bobchristian.blogspot.com - Blog

"u101440" <u101440@discussions.microsoft.com> wrote in message
news:3C00957F-B1B0-424A-A5A9-B214F7EA8808@microsoft.com...