Test mobile user access in Lync Server 2013
Topic Last Modified: 2014-06-07
Verification schedule |
Monthly |
Testing tool |
Windows PowerShell |
Permissions required |
When run locally using the Lync Server Management Shell, users must be members of the RTCUniversalServerAdmins security group. When run using a remote instance of Windows PowerShell, users must be assigned an RBAC role that has permission to run the Test-CsMcxConference cmdlet. To see a list of all RBAC roles that can use this cmdlet, run the following command from the Windows PowerShell prompt: |
Description
The Mobility Service enables mobile device users to do such things as:
Exchange instant messages and presence information.
Store and retrieve voice mail internally instead of with their wireless provider.
Take advantage of Lync Server capabilities such as Call via Work and dial-out conferencing. The Test-CsMcxConference cmdlet provides a quick and easy way to verify that users can join and participate in Lync Server conferences by using a mobile device.
Running the test
To run this check, you must create three Windows PowerShell credentials objects (objects that contain the account name and password) for each account. You must then include those credentials objects and the SIP addresses of the two accounts when you call Test-CsMcxConference as shown in the following example:
$organizerCred = Get-Credential "litwareinc\kenmyer"
$user1Cred = Get-Credential "litwareinc\packerman"
$user2Cred = Get-Credential "litwareinc\adelaney"
Test-CsMcxConference -TargetFqdn "atl-cs-001.litwareinc.com" -Authentication Negotiate -OrganizerSipAddress "sip:kenmyer@litwareinc.com" -OrganizerCredential $organizerCred -UserSipAddress "sip:pilar@litwareinc.com" -UserCredential $user1Cred -User2SipAddress "sip:adelaney@litwareinc.com" -User2Credential $user2Cred
For more information, see the help topic for the Test-CsMcxConference cmdlet.
Determining success or failure
If the check succeeds, Test-CsMcxConference will report a test result of Success:
Target Fqdn : atl-cs-001.litwareinc.com
Target Uri : http://atl-cs-001.litwareinc.com:443/mcx
Result : Success
Latency : 00:00:00
Error Message :
Diagnosis :
If the check is unsuccessful Test-CsMcxConference will report a test result of Failure. This test result will typically be accompanied by a detailed error message and diagnosis. For example:
Target Fqdn : atl-cs-001.litwareinc.com
Target Uri : https://atl-cs-001.litwareinc.com:443/mcx
Result : Failure
Latency : 00:00:00
Error Message : No response received for Web-Ticket service.
Inner Exception:The HHTP request is unauthorized with client
negotiation scheme 'Ntlm'. The authentication header received
from the server was 'Negotiate'.
Inner Exception:The remote server returned an error: (401)
Unauthorized.
Diagnosis :
Inner Diagnosis:X-MS-server-Fqdb : atl-cs-001.litwareinc.com
Cache-Control : private
Content-Type : text/html; charset=utf-8.
Server : Microsoft-IIS/8.5
WWW-Authenticate : Negotiate,NTLM
X-Powered-By : ASP.NET
X-Content-Type-Options : nosniff
Date : Wed, 28 May 2014 19:22:19 GMT
Content-Length : 6305
Reasons why the test might have failed
If Test-CsMcxConference fails you should begin by verifying that the mobility service is running and can be accessed. That can be done by using a web browser to verify that the mobility service URL for your Lync Server pool can be accessed. For example, this command verifies the URL for the pool atl-cs-001.litwareinc.com:
https://atl-cs-001.litwareinc.com/mcx/mcxservice.svc
If the mobility service can be accessed you should then verify that your test users have valid Lync Server accounts. You can retrieve account information by using a command similar to this:
Get-CsUser -Identity "sip:kenmyer@litwareinc.com" | Select-Object Enabled
If the Enabled property is not equal to True or if the command fails, that means that the user does not have a valid Lync Server account.You should also verify that each user account is enabled for mobility. To do that, first determine the mobility policy that is assigned to the account:
Get-CsUser -Identity "sip:kenmyer@litwareinc.com" | Select-Object MobilityPolicy
After you know the policy name, use the Get-CsMobilityPolicy cmdlet to verify that the policy in question (for example, RedmondMobilityPolicy) has the EnableMobility property set to True:
Get-CsMobilityPolicy -Identity "RedmondMobilityPolicy"
If you receive an “authentication header” error message when you run Test-CsMcxConference that often means that you have not specified a valid user account, Verify the user name and password and then try the test again. If you are convinced that the user account is valid, then use the Get-CsWebServiceConfiguration cmdlet and check the value of the UseWindowsAuth property. That will tell you which authentication methods are enabled in your organization.
For more tips about how to troubleshoot the mobility service, see the blog post Troubleshooting External Lync Mobility Connectivity Issues Step-by-Step.