Share via

Setting up Sefautil for Lync 2013

  • Article

Hello TechNet Reader

This is my 1st post to the wiki with information taken from my lync blog.

First of all you will need the following;

  • Lync Server 2013 Reskit Installed
  • UCWA 4.0 Installed

If you plan on running the SefaUtil Tool from another server, you will need to install Lync Components on the Server. Insert Media and install

  • Microsoft Visual C++
  • Click Install or Update Lync Server System then run through the steps

For this post I am collocating the SEFAUtil on my Lync Front End Server.

We now need to launch the Lync Management Shell and perform the following commands to build a Trusted Application Pool as sefautil is an external application to the Lync Environment.

New-CsTrustedApplicationPool -Identity FE01.legendarytechy.local -Registrar  FE01.legendarytechy.local

This command will go to the default Lync Site for Environment if you have multiple sites you can use the -site switch to specify the required site.

New-CsTrustedApplication -ApplicationId sefautil -TrustedApplicationPoolFqdn  FE01.legendarytechy.local  -Port 7488

The Port number can any number that you want but for this blog post I have used 7488. You will now need to Enable the Topology Changes by entering Enable-CsTopology into the Lync Management Shell.

To confirm the Application has been authorised you can use Get-CsTrustedApplication or go into the Lync Control Panel --> Topology --> Trusted Application

http://2.bp.blogspot.com/-LcutZxDXutc/UZTbVaXpjLI/AAAAAAAAAeo/BnieIxBD10c/s640/Blog+SEFA.png

You will now need to open a command prompt as an Administrator (Shift+Right Click) Run As Administrator.

Enter the below Switch to take you to the sefautil.exe

Cd /Program Files\Microsoft Lync Server 2013\ResKit

If you enter sefautil and press enter it will output the commands sefautil can do or you can visit this post http://priceylync.blogspot.co.uk/2013/05/sefautil-commands-for-lync-2013.html 

One thing to watch out for it is you enter;

sefautil /server:lyncserver.domain.local sip.user@domain.local and if it doesn't return any output. You account doesn't have the required permissions to use the SEFEUtil tool.

I have been looking at this issue for some time, added myself into the same groups as the domain admin but was still unable to get any output. In the end I just made copied the DA account and was able to apply commands against Lync Users.

I have saw blog post where people have added themselves in CsUserAdministrator or CsServerAdministrator but I am yet to see a true fix for the issue, I experienced.