Solved

Why would the FE Servers On-Prem in Lync 2013 try to reach All the DC's in Domain? How can we limit the connection to one of two DC's?

Posted on 2014-12-23
10
1,467 Views
Last Modified: 2014-12-25
I have been working on finding if there is way to limit the number of DCs to which Lync 2013 would like to connect to. This is an event that is frequently reported. All of the IPs belong to DC but I would like to know why the Lync Server needs to reach DCs on port 5061. Any thoughts?

12/11/2014 09:56:30 AM
LogName=Lync Server
SourceName=LS Protocol Stack
EventCode=14584
EventType=2
Type=Error
ComputerName=
TaskCategory=LS Protocol Stack
OpCode=None
RecordNumber=1122212
Keywords=Classic
Message=Connection attempt to at least one service in a pool failed.


Connection attempts to the following services have failed. Another attempt will be made for each service every 10 minutes.
Service Address: 10.4.8.103:5061; Pool FQDN: *.org; Down Time: 0:00

Cause: The specified service(s) are unavailable.

Resolution:
Check the servers in the pool(s) on which the service(s) are installed.
0
Comment
Question by:K Anthony O365
  • 5
  • 4
10 Comments
 
LVL 19

Assisted Solution

by:Adam Farage
Adam Farage earned 100 total points
ID: 40515273
Lync should be hitting domain controllers within there local AD site only. I believe there is a way to limit this to a particular domain controller (as you can do with Exchange) but I wouldn't recommend it. This is built in resiliency for the situation where a DC goes down, Lync can utilize another in-site domain controller to authenticate.

In the event that an in-site domain controller is not available it will then go to the closest site (depending on site link values) and utilize that domain controller.
0
 
LVL 56

Assisted Solution

by:Cliff Galiher
Cliff Galiher earned 400 total points
ID: 40515281
Looks like a DNS or maybe a topology issue. 5061 is SIP, and Lync has no reason to contact a DC via SIP. It is also reporting your pool FQDN as *.org, which means Lync will think every record in DNS is a part of the pool. So it isn't trying to contact a DC, it thinks it is trying to contact a pool member.
0
 

Author Comment

by:K Anthony O365
ID: 40515286
Cliff,

The actual Pool ID has been purposely omitted. So I don't think DNS is the issue. What protocol will Lync use to contact a DC? And is there a way to limit it to certain DC's in same site i.e. Exchange?
0
 
LVL 56

Accepted Solution

by:
Cliff Galiher earned 400 total points
ID: 40515294
LDAP, not SIP. That 5061 is still a sign of a misconfigurarion.  There is no way that I'm aware of to restrict Lync Server to specific DCs.
0
 

Author Comment

by:K Anthony O365
ID: 40515325
We have TMG in a DMZ and we're also using a Director role in our environment. Does that make a difference?
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 56

Expert Comment

by:Cliff Galiher
ID: 40515326
Nope.
0
 

Author Comment

by:K Anthony O365
ID: 40515356
Thanks!
0
 

Author Comment

by:K Anthony O365
ID: 40515393
I constantly get these from SCOM...related to Lync 2013. Could this be related?

Alert: [LYNC] The number of requests currently in processing by application that have not yet been authenticated or are processed anonymously.
Source: Application Pool [LM_W3SVC_34577_ROOT_GroupExpansion]
Path: LyncServer.Domain.org
Last modified by: System
Last modified time: 12/22/2014 1:21:58 PM Alert description: Perf Object Name:
Perf Counter Name: WEB - Unauthenticated Requests In Processing Perf Counter Value: 4294967296 Error Threshold: 2499 Warning Threshold: 2000 Delta Window Size: 3 Dynamic Instance. Name: Application Pool DependencyId: ApplicationPool Symbol Prefix: WEBAUTH Category: LS:WEB - Throttling and Authentication Discover Interval: 14400 Excluded Instances:
Please see the 'Product Knowledge' and the 'Alert Context' tab on Alert Properties view for more information.
0
 
LVL 56

Expert Comment

by:Cliff Galiher
ID: 40515401
Possibly. Tough to tell for sure.
0
 

Author Closing Comment

by:K Anthony O365
ID: 40517766
Comments were very helpful! Still looking for a solution, but comments pointed me in right direction.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Local Continuous Replication is a cost effective and quick way of backing up Exchange server data. The following article describes the steps required to configure Local Continuous Replication. Also, the article tells you how to restore from a backup…
Following basic email etiquette rules will help you write a professional email and achieve a good, lasting impression with your contacts.
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now