Tuesday, September 22, 2015

September 2015 Security update for Lync server causes multiple issues (KB3080353)

Applying the Sep 2015 security patch can cause multiple issues, including:

1: Dialin.domain.com sign-in ability is broken
2: Mobility stops working
3: External Clients can’t sign in
4: Address book web queries fails
5: Credential Prompts after Signing in to Lync

The above issues can be avoided by ensuring your Lync servers are at the latest update level BEFORE applying KB3080353. Per MS support, the minimum requirement is July 2015 Lync Server 2013 CU 5.0.8308.920.

Short-term fix is to uninstall this security update and restart your Lync server(s). This will give you some breathing room to test/evaluate/plan the deployment of the July 2015 Lync server update. Since KB3080353 is a security update, it should be applied back on the server asap.

September 2015 Security update info - https://support.microsoft.com/en-us/kb/3080353

Event details (when address book web queries were failing):
Log Name:      Application
Source:        System.ServiceModel
Event ID:      3
Task Category: WebHost
Level:         Error
Keywords:      Classic
User:          NETWORK SERVICE
WebHost failed to process a request.
 Sender Information: System.ServiceModel.ServiceHostingEnvironment+HostingManager/28379535
 Exception: System.ServiceModel.ServiceActivationException: The service '/WebTicket/WebTicketService.svc' cannot be activated due to an exception during compilation.  The exception message is: Method not found: 'Microsoft.Rtc.Management.Config.Settings.Web.MobilePreferredAuthType Microsoft.Rtc.Management.Config.Settings.Web.WebServiceSettings.get_MobilePreferredAuthType()'.. ---> System.MissingMethodException: Method not found: 'Microsoft.Rtc.Management.Config.Settings.Web.MobilePreferredAuthType Microsoft.Rtc.Management.Config.Settings.Web.WebServiceSettings.get_MobilePreferredAuthType()'.
   at Microsoft.Rtc.Internal.WebTicketService.WebTicketServiceHostFactory.CreateServiceHost(Type serviceType, Uri[] baseAddresses)
   at System.ServiceModel.Activation.ServiceHostFactory.CreateServiceHost(String constructorString, Uri[] baseAddresses)
   at System.ServiceModel.ServiceHostingEnvironment.HostingManager.CreateService(String normalizedVirtualPath, EventTraceActivity eventTraceActivity)
   at System.ServiceModel.ServiceHostingEnvironment.HostingManager.ActivateService(ServiceActivationInfo serviceActivationInfo, EventTraceActivity eventTraceActivity)
   at System.ServiceModel.ServiceHostingEnvironment.HostingManager.EnsureServiceAvailable(String normalizedVirtualPath, EventTraceActivity eventTraceActivity)
   --- End of inner exception stack trace ---
   at System.ServiceModel.ServiceHostingEnvironment.HostingManager.EnsureServiceAvailable(String normalizedVirtualPath, EventTraceActivity eventTraceActivity)
   at System.ServiceModel.ServiceHostingEnvironment.EnsureServiceAvailableFast(String relativeVirtualPath, EventTraceActivity eventTraceActivity)
 Process Name: w3wp

 Process ID: 16412


  1. Nice find on this, I'm trying it tonight. We are seeing the exact same thing and I was blaming the patches but I wasn't sure which one.

  2. Nice information about the issues regarding security update. Thanks for sharing this info for avoiding these issues.