Walkthrough_Microsoft_Lync_Server_2010_(RC)_Standard_Edition_Server_with_External_Access.doc

walkthrough: microsoft lync server 2010 standard edition server with external accesspublished: september 2010this document is provided “as-is”. information and views expressed in this document, including url and other internet web site references, may change without notice. you bear the risk of using it. some examples depicted herein are provided for illustration only and are fictitious. no real association or connection is intended or should be inferred. this document does not provide you with any legal rights to any intellectual property in any microsoft product. you may copy and use this document for your internal, reference purposes. this document is confidential and proprietary to microsoft. it is disclosed and can be used only pursuant to a non-disclosure agreement. copyright 2010 microsoft corporation. all rights reserved. microsoft, active directory, activesync, activex, excel, forefront, groove, hyper-v, internet explorer, lync, msdn, msn, onenote, outlook, powerpoint, roundtable, sharepoint, silverlight, sql server, visio, visual c+, windows, windows media, windows powershell, windows server, and windows vista are trademarks of the microsoft group of companies. all other trademarks are property of their respective owners.contentswalkthrough: lync server 2010 standard edition server with external access1walkthrough: introduction1step 1: prerequisites1walkthrough: prerequisites2walkthrough: deploy topology2step 2: prepare environment4walkthrough: prepare iis5walkthrough: install active directory administrative tools5walkthrough: install sql server native client6walkthrough: prepare dns6walkthrough: prepare file shares7walkthrough: enable remote administration8walkthrough: run lync server 2010 setup8walkthrough: prepare active directory domain services8walkthrough: update security group membership10step 3: create a topology using the planning tool10walkthrough: install the planning tool10walkthrough: create a topology11walkthrough: export sample data12walkthrough: view site topology12walkthrough: modify edge network diagram12walkthrough: review edge admin report13walkthrough: save and export totopology builder13step 4: modify the topology using topology builder13walkthrough: installing topology builder14walkthrough: edit topology14walkthrough: edit edge pools15walkthrough: configure administration url16walkthrough: review and save topology16step 5: publish topology17walkthrough: prepare first standard edition server17walkthrough: publish topology17walkthrough: open to-do list17step 6: deploy lync server 2010 standard edition18walkthrough: install the local configuration store18walkthrough: install components18walkthrough: configure certificates18walkthrough: start services19step 7: deploy a director19walkthrough: install the local configuration store20walkthrough: install components20walkthrough: configure certificates20walkthrough: start services21step 8: validate internal server deployment21walkthrough: confirm services started22walkthrough: create and enable users22walkthrough: install lync23walkthrough: test server configuration23step 9: prepare for external access deployment23walkthrough: external server and client computers24walkthrough: verify dns records for edge support24walkthrough: configure the dns suffix for edge servers24walkthrough: request certificate chain from the internal enterprise ca25walkthrough: configure network interfaces for edge servers25walkthrough: export your topology25step 10: deploy edge servers26walkthrough: install edge servers26walkthrough: setup certificates for the internal edge interface26walkthrough: setup certificates for the external edge interface28walkthrough: start edge servers30walkthrough: microsoft lync server 2010 standard edition server with external accesswalkthrough: lync server 2010 standard edition server with external accessthis documentation describes how to deploy lync server 2010 in a fresh environment with no existing lync server deployment. it also includes the required server roles for external user access. the deployment of microsoft lync server 2010communications software includes preparing active directory domain services (ad ds), deploying the standard edition server, other core lync server 2010 internal components, and then deploying any additional server roles and features that your organization may require, such as external user access, which includes an edge server, a reverse-proxy server, and a director. walkthrough: introductionstep 1: prerequisitesstep 2: prepare environmentstep 3: create a topology using the planning toolstep 4: modify the topology using topology builderstep 5: publish topologystep 6: deploy lync server 2010 standard editionstep 7: deploy a directorstep 8: validate internal server deploymentstep 9: prepare for external access deploymentstep 10: deploy edge serverswalkthrough: introductionthis document describes the steps necessary to deploy microsoft lync server 2010 in a lab environment in a single forest, single domain topology. the deployment of lync server 2010 also includes a consolidated edge server for external user access, a reverse-proxy server, and client machines for testing.note: the deployment of the reverse-proxy server will be covered in this document at a later date. for installation information, see forefront tmg deployment.step 1: prerequisitesbefore you deploy and operate microsoft lync server 2010communications software, you must first apply the software prerequisites, understand the deployment topology you will be building and the overall deployment process. the deployment topology for this walkthrough includes an internal deployment of lync server 2010, and the supporting server roles for external user access. the lync server deployment wizard prepares active directory domain services, configures a local copy of microsoft sql server database software, configures firewalls, and installs and starts the core services.walkthrough: prerequisiteswalkthrough: deploy topologywalkthrough: prerequisitesbefore you deploy lync server 2010, ensure that your environment meets the following requirements:the 64-bit edition of the windows server 2008 r2 operating system installed on all server roles.windows 7 operating system installed on client computers.net 3.5 sp1 installed on all servers.the microsoft silverlight browser plug-in installed on standard edition server and director.active directory administrative tools feature installed on standard edition server and director. installing this feature now prevents a reboot to the servers during deployment. see walkthrough: install active directory administrative tools for details.all clients and servers are up to date with patches from windows update.domain controller is running windows server 2008 r2 configured as a domain controller, dns server, and certification authority (ca).standard edition server is running windows server 2008 r2 on which you will install lync server 2010.director is running windows server 2008 r2 on which you will install the lync server 2010 director role.edge server is running windows server 2008 r2 on which you will install the lync server 2010 edge server role.proxy server is running windows server 2008 r2 on which you will install the microsoft forefront threat management gateway (tmg) 2010 software. note: the deployment of the reverse-proxy server will be covered in this document at a later date. for installation information, see forefront tmg deploymentthree client machines are running the windows 7 operating system to test features and external user access.this walkthrough uses the default computer administrator account. once the machines are domain joined, the default domainadministrator account is also used.walkthrough: deploy topologythis walkthrough describes a deployment of microsoft lync server 2010 for organizations with fewer than 5000 users who intend to deploy a single standard edition server with external user access. in this deployment, the standard edition server supports im, presence, a/v conferencing and web conferencing. the edge server, director and reverse-proxy server provide remote user access, federation, and conferencing with anonymous users. to follow along with this lab, configure your physical or virtual machines to match the table below. caution: it is highly recommended that all of the physical or virtual computers represented in the topology are online before starting this lab. specifically, before you can publish a topology successfully, the standard edition server and the director must have computer account entries in active directory domain services prior to publishing.deploy topology1.set up server as a domain controller, dns server, and certification authority (ca).2.join the standard edition server and the director as member servers in the domain.3.join two of the client machines to the domain.4.log on to clients and servers as domain members (ie, contosoadministrator), and not as the local machine administrator (ie, lab-seadministrator).5.configure the third client machine, the edge server, and the reverse-proxy server as members of a workgroup.6.configure the edge server with two network cards, with one interface connected to the internal network and the other connected to the workgroup.7.configure the reverse-proxy server with two network cards, with one interface connected to the internal network and the other connected to the workgroup.rolefqdnip addressdomain cstandard edition sdreverse proxy serverworkgrouplab-proxyedge serverworkgrouplab-edgeccclient3workgroupclient3step 2: prepare environmentprior to deployment, you must ensure you meet all the software requirements that define the deployment reference topology. once the software requirements are met, active directory preparation is the next critical step that must be completed prior to deployment of microsoft lync server 2010communications software. walkthrough: prepare iiswalkthrough: install active directory administrative toolswalkthrough: install sql server native clientwalkthrough: prepare dnswalkthrough: prepare file shareswalkthrough: enable remote administrationwalkthrough: run lync server 2010 setupwalkthrough: prepare active directorywalkthrough: update security group membershipwalkthrough: prepare iisinternet information services (iis) must be configured on the standard edition server and the director with the following role services installed:iis requirementsrole headingrole servicecommon http features installedstatic contentcommon http features installeddefault documentcommon http features installedhttp errorscommon http features installedhttp redirectionapplication developmentasp.netapplication development.net extensibilityapplication developmentinternet server api (isapi) extensionsapplication developmentisapi filtershealth and diagnosticshttp logginghealth and diagnosticslogging toolshealth and diagnosticstracingsecuritywindows authenticationsecurityclient certificate mapping authenticationsecurityrequest filteringperformancestatic content compressionmanagement toolsiis management console management toolsiis management scripts and toolswalkthrough: install active directory administrative toolsinstall the active directory administrative tools on the standard edition server and the director.install active directory administrative tools1.open server manager and select features.2.click add features. 3.expand the node remote server administration tools.4.expand the node role administration tools.5.select ad ds and ad lds tools and then click next to install this feature.6.restart the server to finish the installation process.walkthrough: install sql server native clientinstall the sql server native client on the standard edition server and the director.install sql server native client1.from the installation media, navigate to serversqlncli.exe and install the sql server native client program.walkthrough: prepare dnscreate the following dns entries to match the topology shown earlier in this walkthrough. the procedure for creating dns a and dns srv records are shown below the table.descriptionfqdnip addressdial-in urlmeeting urladministration urldns srv record_sipinternaltlsport number: 5061protocol: _tcphost fqdn: proxy server internal iedge server internal iweb services external urlconfigure a dns srv record1.on the dns server, click start, click administrative tools, and then click dns.2.in the console tree for your sip domain, expand forward lookup zones, and then right-click the sip domain in which lync server 2010 will be installed.3.click other new records.4.in select a resource record type, click service location (srv), and then click create record.5.click service, and then type _sipinternaltls.6.click protocol, and then type _tcp.7.click port number, and then type 5061.8.click host offering this service, and then type the fqdn of the standard edition server ().9.click ok, and then click done.create a dns a record1.on the dns server, click start, click control panel, click administrative tools, and then click dns.2.in the console tree for your domain, expand forward lookup zones, and then right-click the domain in which your lync server will be installed.3.click new host (a).4.click name (uses parent domain name if blank), and then type the name of the standard edition server. 5.click ip address, and then type the ip address of the standard edition server.6.click add host, and then click ok.7.to create an additional a record, repeat steps 4 and 5.8.when you are finished creating all the a records that you need, click done.walkthrough: prepare file shareson the standard edition server, create a file share named share. configure the administrator account to have full rights. configure everyone else to have read only privileges. walkthrough: enable remote administrationon the standard edition server and director, enable remote administration of the server.enable remote administration1.from the standard edition server, open the control panel.2.open the system application, and select remote settings.3.select allow connections from computers running any version of remote desktop (less secure)4.click ok to close system properties.5.next, from the control panel, open the windows firewall application. 6.select allow a program or feature through windows firewall.7.from the list, select remote administration and click ok.8.close the control panel.walkthrough: run lync server 2010 setuprun lync server 2010 setup1.from the installation media, run serverocsbootstrappersetup.exe. 2.install the visual c+ 2008 redistributable if asked. 3.select the default installation directory and begin the installation.walkthrough: prepare active directory domain servicesopen the lync server deployment wizard and follow the procedures below to prepare the active directory schema, forest, and domain for lync server.open lync server deployment wizardto open the deployment wizard 1.from the standard edition server, open the program group microsoft lync server 2010 (rc).2.select lync server deployment wizard.3.select prepare active directory.run schema prepto use setup to prepare the schema of the current forest1.at step 1: prep schema, click run.2.on the prepare schema page, click next.3.on the executing commands page, look for task status: completed, and then click view log.4.under the action column, expand forest prep, look for execution result at the end of each task to verify that forest preparation completed successfully, close the log, and then click finish.5.wait for active directory replication to complete or force replication.6.manually verify that the schema changes replicated to all other domain controllers, as described in the following procedure.run forest prepto use setup to prepare the forest1.at step 3: prepare current forest, click run.2.on the prepare forest page, click next.3.on the executing commands page, look for task status: completed, and then click view log.4.under the action column, expand forest prep, look for execution result at the end of each task to verify that forest preparation completed successfully, close the log, and then click finish.5.wait for active directory replication to complete, or force replication to all domain controllers listed in the active directory sites and services snap-in for the forest root domain controller, before running domain preparation. force replication between the domain controllers in all active directory sites to cause replication within the sites to occur within minutes.run domain prepto use setup to prepare domains1