PowerShell Deployment of Web Application Proxy and ADFS in Under 10 Minutes

14th of August, 2013 / / 17 Comments

===========================================================================
Updated 10 September 2013: tested with Windows 2012 R2 RTM and the script functions as in R2 Preview. Outlook Anywhere bug in the Preview code has been fixed and Outlook now works with RTM. Updated the script to correct Autodiscover ExternalURL
===========================================================================

In this post I will be discussing deploying a highly available Windows 2012 R2 Preview ADFS and Web Application Proxy solution using only PowerShell. This was done as a proof of concept to compare the time taken as well as complexity to build and configure a Reverse Proxy solution to replace a UAG 2010 array.… [Keep reading] “PowerShell Deployment of Web Application Proxy and ADFS in Under 10 Minutes”

Publish Lync 2013 with 2012 R2 Preview Web Application Proxy

15th of July, 2013 / / 16 Comments

I discussed the new Windows 2012 R2 Preview Web Application Proxy (WAP) remote access role in a previous post Windows 2012 R2 Preview Web Application Proxy – Exchange 2013 Publishing Tests. I showed how to publish Exchange 2013 (except for Outlook Anywhere which isn’t working) and a claims based application.

In this post I am going to cover:

Publishing Lync Applications

Lync has a few different namespaces that need to be published:

  • Lync External Web Services (which includes the Lync Web App and Lync Scheduler)
  • Lync meeting join
  • Lync dialin page
  • Lyncdiscover for client autodiscover
  • Office Web Apps Server for PowerPoint sharing

Lync applications cannot use Preauthentication and have to use Pass-through which lets the backend server provide authentication.… [Keep reading] “Publish Lync 2013 with 2012 R2 Preview Web Application Proxy”

Windows 2012 R2 Preview Web Application Proxy – Exchange 2013 Publishing Tests

3rd of July, 2013 / / 51 Comments

==================
Updated: 10 September 2013

==================
Updated: 15 July 2013

  • I have heard from a member of the Web Application Proxy product group who said there is a bug in the Preview version that prevents Outlook Anywhere from working. They say it will be fixed in the RTM version
  • Lync 2013 and  Office Web Apps 2013 have been tested and work with some configuration changes.
… [Keep reading] “Windows 2012 R2 Preview Web Application Proxy – Exchange 2013 Publishing Tests”

Outlook Anywhere NTLM SSO with UAG 2010 KCD

17th of May, 2013 / / 8 Comments

Outlook Anywhere can be configured with two authentication methods – Basic and NTLM. Outlook Anywhere NTLM authentication has always been a bit of a tricky beast when using a pre-authenticating reverse proxy like TMG or UAG. The benefit it can bring is that a user signed on to a domain joined computer with a domain account can get seamless SSO (Single Sign On) without entering a password. This can happen if the user is on the corporate network or if they are remote using Outlook Anywhere (RPC over HTTP) and cached credentials.… [Keep reading] “Outlook Anywhere NTLM SSO with UAG 2010 KCD”

UAG 2010 – Problems with Custom Trunk Ports and Failing Redirects

10th of May, 2013 / / 1 Comment

UAG 2010 prior to Service Pack 1 Update 1 did not support publishing trunks on custom ports – only 80 and 443 were supported. That meant each UAG trunk required a separate IP address per trunk. With SP 1 Update we could publish UAG trunks on custom ports on a single IP address, although it doesn’t seem many people actually did this. For a customer recently where UAG 2010 was required with 5 trunks, there was an existing network architecture restriction that required the UAG servers to use public IP addresses.… [Keep reading] “UAG 2010 – Problems with Custom Trunk Ports and Failing Redirects”

Publish Lync 2013 Including Mobility and Office Web Apps with UAG 2010

6th of May, 2013 / / 11 Comments

Microsoft Forefront TMG (Threat Management Gateway) has been the primary way Lync Web Services have been published in the past. With the untimely demise of TMG, the only Microsoft product (other than IIS) with reverse proxy functionality is Microsoft Forefront UAG (Unified Access Gateway). TMG will continue to be supported until 2015 for mainstream support and 2020 for extended support. If TMG is not already installed however, technically it cannot be used for a new installation.… [Keep reading] “Publish Lync 2013 Including Mobility and Office Web Apps with UAG 2010”