IntenseDebate - Elan Shudnow

9 years ago @ Elan Shudnow's Blog - Enabling QoS for Lync ... · 0 replies · +2 points

It's definitely source port.

9 years ago @ Elan Shudnow's Blog - Exchange 2010 Site Res... · 0 replies · +1 points

Seeding only works for databases within a DAG.

9 years ago @ Elan Shudnow's Blog - Enabling QoS for Lync ... · 0 replies · +2 points

It only applies to PC clients. Mobile clients do not support QoS.

9 years ago @ Elan Shudnow's Blog - Exchange 2010 Site Res... · 1 reply · +1 points

You don't have to do this. The Clustering Service will take care of all this during the DAG creation process or the failover process.

11 years ago @ Elan Shudnow's Blog - How Anonymous Relay wo... · 1 reply · +3 points

Yes, that makes sense. If the client is authenticating, all you need to do is have the Exchange User permission checked. This will allow them to utilize that connector. Then for the devices that cannot authenticate, you can simply just use the relay connector as I have outlined in this article.

11 years ago @ Elan Shudnow's Blog - How Anonymous Relay wo... · 0 replies · +2 points

You need to use either Anonymous as I outlined or you can use Externally Secured. The problem with Externally Secured is anything that hits that connector also bypasses antispam rules. With Externally Secured, you're providing more privileges than are necessary. Principle of Least privilege applies here. I recommend using the Anonymous Group method I have outlined. As always, it is imperative that you restrict what IPs can hit your connector or you will turn your server into an open relay.

11 years ago @ Elan Shudnow's Blog - Outlook Certificate Er... · 0 replies · +2 points

This article has absolutely nothing to do with disabling SSL for any Exchange related stuff and is about disabling SSL at the root only as an option. Obviously if you require any security at the root such as for logging in or anything else, you would want SSL. And if you do want SSL, make sure the certificate includes the root domain name. Both are options. Obviously you need to make the smart decision based on your needs. But again, it's still a workable option. And quite honestly, if you decide to choose the disable SSL option and your root webpage needs SSL for secure transactions or for secure logins, you shouldn't be in IT...

I did however edit the post to add some clarification around the preferred method and why.

11 years ago @ Elan Shudnow's Blog - Outlook Certificate Er... · 0 replies · +1 points

Yep, my mistake. I knew that but copied this from another really old Autodiscover article I wrote before I learned about the oldest SCP thing. Thanks for pointing it out, I will get it corrected.

11 years ago @ Elan Shudnow's Blog - Lync Server 2010 Port ... · 0 replies · +1 points

SIP always goes from the Edge to its next hop. However, Media always goes direct to the shortest path. So the Edge A would send media directly to Pool B. Edge A would talk to Pool A (if Pool A is Edge A's next hop), Pool A would proxy the traffic to Pool A if the conference or user is on Pool A for authentication., and then the media will go direct.

If Pool B is in another site with its own Edge B, part of the proxy from Pool A to Pool B will find the External AV FQDN for Pool B and have the external user talk to the AV FQDN that belongs to Edge B and the external user will start talking to Edge B. This is what enables regional/worldwide deployments to ensure AV is as local as possible no matter what Edge you may initially hit for authentication.

11 years ago @ Elan Shudnow's Blog - Lync MX Client - Viewi... · 0 replies · +1 points

You need to use the Charm and choose Settings.

IntenseDebate Comment System

Description

Connect with Elan Shudnow

People I'm following

Elan Shudnow