Tuesday, September 22, 2015

September 2015 Security update for Lync server causes multiple issues (KB3080353)

Applying the Sep 2015 security patch can cause multiple issues, including:

1: Dialin.domain.com sign-in ability is broken
2: Mobility stops working
3: External Clients can’t sign in
4: Address book web queries fails
5: Credential Prompts after Signing in to Lync

The above issues can be avoided by ensuring your Lync servers are at the latest update level BEFORE applying KB3080353. Per MS support, the minimum requirement is July 2015 Lync Server 2013 CU 5.0.8308.920.

Short-term fix is to uninstall this security update and restart your Lync server(s). This will give you some breathing room to test/evaluate/plan the deployment of the July 2015 Lync server update. Since KB3080353 is a security update, it should be applied back on the server asap.

September 2015 Security update info - https://support.microsoft.com/en-us/kb/3080353

Event details (when address book web queries were failing):
Log Name:      Application
Source:        System.ServiceModel
Event ID:      3
Task Category: WebHost
Level:         Error
Keywords:      Classic
User:          NETWORK SERVICE
WebHost failed to process a request.
 Sender Information: System.ServiceModel.ServiceHostingEnvironment+HostingManager/28379535
 Exception: System.ServiceModel.ServiceActivationException: The service '/WebTicket/WebTicketService.svc' cannot be activated due to an exception during compilation.  The exception message is: Method not found: 'Microsoft.Rtc.Management.Config.Settings.Web.MobilePreferredAuthType Microsoft.Rtc.Management.Config.Settings.Web.WebServiceSettings.get_MobilePreferredAuthType()'.. ---> System.MissingMethodException: Method not found: 'Microsoft.Rtc.Management.Config.Settings.Web.MobilePreferredAuthType Microsoft.Rtc.Management.Config.Settings.Web.WebServiceSettings.get_MobilePreferredAuthType()'.
   at Microsoft.Rtc.Internal.WebTicketService.WebTicketServiceHostFactory.CreateServiceHost(Type serviceType, Uri[] baseAddresses)
   at System.ServiceModel.Activation.ServiceHostFactory.CreateServiceHost(String constructorString, Uri[] baseAddresses)
   at System.ServiceModel.ServiceHostingEnvironment.HostingManager.CreateService(String normalizedVirtualPath, EventTraceActivity eventTraceActivity)
   at System.ServiceModel.ServiceHostingEnvironment.HostingManager.ActivateService(ServiceActivationInfo serviceActivationInfo, EventTraceActivity eventTraceActivity)
   at System.ServiceModel.ServiceHostingEnvironment.HostingManager.EnsureServiceAvailable(String normalizedVirtualPath, EventTraceActivity eventTraceActivity)
   --- End of inner exception stack trace ---
   at System.ServiceModel.ServiceHostingEnvironment.HostingManager.EnsureServiceAvailable(String normalizedVirtualPath, EventTraceActivity eventTraceActivity)
   at System.ServiceModel.ServiceHostingEnvironment.EnsureServiceAvailableFast(String relativeVirtualPath, EventTraceActivity eventTraceActivity)
 Process Name: w3wp

 Process ID: 16412


  1. Nice find on this, I'm trying it tonight. We are seeing the exact same thing and I was blaming the patches but I wasn't sure which one.

  2. Nice information about the issues regarding security update. Thanks for sharing this info for avoiding these issues.

  3. Gatekeepers endeavor in guaranteeing that kept an eye on monitors are dependably a safe secure and solid approach to ensure yourself as well as other people. Fast Guard Service

  4. Numerous security organization's promote "previous law implementation" as an advantage to customers. I don't feel this is dependably an advantage. Numerous cops who are resigning are not familiar with buckling down and an organization's workers are more often than not in some part, illustrative of its proprietor.ekran system login

  5. On the off chance that you are wanting to utilize spy cameras to enhance your business, you have to think past simply discovering individuals doing things wrong, www.wittyspy.com

  6. They took up a ton of room, could debase after some time so long haul stockpiling truly wasn't an alternative, and were effectively corruptible. Best Security Place

  7. The collector gets the sign and moves it to a TV or Monitor or Digital Video Recorder. So no wiring is required. Remote cameras are a lot simpler to introduce and can be mounted anyplace and can be moved around effortlessly. Witty Spy