Lync Address Book synchronization knowledge point

1.WebSite and release

In ocs2007 and ocs2007 R2, the OCS front-end server IIS uses the same web site for internal and external access. The default port is 443;

In lync, internal websites (default port 443) and external websites (default port 4443) are provided for internal and external accesses respectively ), but in fact, both web sites can provide services to external users.

All internal users must be able to parse the internal URL address and access the port 443 of the corresponding IP address.

If you use ISA to publish an internal web site, we recommend that you bridge 443-& gt; 4443. external users access the IP address and port 443 corresponding to the external FQDN of ABS;

If you map a NAT device to a Web site, you can also directly map port 443 of the external IP address to port 443 of the internal web site to provide web services to external users.

 

2.Authentication Problems

In ocs2007 and ocs2007 R2, it is always a headache to select the Authentication Mode for the ABS virtual directory. The default integrated Authentication mode is used, the client in the Working Group and other domains may not be able to synchronize the address book normally;

In lync, the Default Authentication Mode of the ABS virtual directory is integrated identity authentication, but the address book can be successfully synchronized in the Working Group and clients of other domains by default. No problems are found.

 

3.LyncDatabase and ADSynchronization cycle

Adding new lync users, changing the phone properties of lync users, and other operations on ad requires time synchronization to the lync database.

Run the following command to view the synchronization period:

From the result, we can see that the synchronization cycle is 1 minute.

 

4.From lync2010Database to server ABSSynchronization cycle

Sometimes we will find that after a new lync user is added, the user cannot be found by entering some characters of the new user's sip address in the search bar of the client, you must enter the complete sip address to find the user.

This is because the new lync user's ad change operation was synchronized to the lync database one minute later, but not to the ABS file on the server.

We can see the synchronization cycle from the lync2010 database to the ABS on the server through the following command:

From the value of runtimeofday, we can see that the synchronization time of ABS is every morning and only one synchronization every day. All new users created on the day can be found through fuzzy search the next day.

You can run the set-caaddressbookconfiguration-runtimeofday <datetime> command to change the daily synchronization time.

In addition, lync2010 provides a command to synchronize abs and database immediately. The command is as follows:

Five minutes later, we can verify the synchronization in the event log.

 

5.Client Address Book synchronization time

When you log on to the lync client, it takes 1-60 minutes to download the client from the server abs.Galcontacts. DBAndGalcontacts. DB. idxThese two address book files;

You will not be able to use fuzzy search at this time. When you search for "-", the client will prompt you that the address book is being synchronized;

We can change the following registry value so that the client can download it immediately.Galcontacts. DBAndGalcontacts. DB. idxEnter the following command in the command prompt:

Reg add HKLM \ SOFTWARE \ Policies \ Microsoft \ communicator/V galdownloadinitialdelay/T REG_DWORD/D 0/F

But when your computer already existsGalcontacts. DBAndGalcontacts. DB. idxTo synchronize the two files, you still need to wait 1-60 minutes to compare them with the ABS server.

We can exit the client and delete it.Galcontacts. DBAndGalcontacts. DB. idxThese two files can be re-downloaded immediately after logon.Galcontacts. DBAndGalcontacts. DB. idx.

 

6. Influence of internal certificates on client Address Book Synchronization

In ocs2007 R2, the certificate configured by the front-end server IIS is an internal Certificate rather than a public certificate. When you log on to the OC externally, the OC cannot synchronize the address book!

This phenomenon still exists in lync. You need to change the IE security settings of the client, remove the check before "Check server certificate revocation *", or replace the certificate with a public certificate.