Generated by All in One SEO v4.9.0, this is an llms.txt file, used by LLMs to index the site.

# Shawn Harry

Cloud UC Consultant Architect

## Sitemaps

- [XML Sitemap](https://shawnharry.co.uk/sitemap.xml): Contains all public & indexable URLs for this website.

## Posts

- [Blog Posts](https://shawnharry.co.uk/blog-posts/) - This is an example page. It's different from a blog post because it will stay in one place and will show up in your site navigation (in most themes). Most people start with an About page that introduces them to potential site visitors. It might say something like this: Hi there! I'm a bike messenger
- [Quiet Quitting](https://shawnharry.co.uk/2025/10/16/quiet-quitting/) - Quiet quitting is a new term thats made its way into Western lexicons to describe a new phenomena that emerged during the Covid years. Its used to describe employees who are dissatisfied which leads them to doing the minimum amount of work necessary to remain in jobs they dont like, or to describe employees who
- [Enabling Screen Capture on a Poly SIP Phone](https://shawnharry.co.uk/2026/02/21/enabling-screen-capture-on-poly-handsets/) - For years Poly or as it was formerly known Polycom supported the ability to screen capture a Phone which is obviously a very useful feature for remotely troubleshooting a problem or even to get a visual status of a Phone as an administrator. Unfortunately the Teams Admin Centre or TAC doesnt have this capability and
- [Hotdesking with MicrosoftTeams IP Phones](https://shawnharry.co.uk/2020/01/21/hotdesking-with-microsoftteams-ip-phones/) - I noticed a few days ago a new firmware was available to update my Yealink T58A to build 58.15.0.87 from 58.15.0.85. Unfortunately there dont seem to be any release notes available yet from Yealink or even Microsoft on this build and what new features it may contain. But i did notice "Hot Desk" is available in the client.
- [M365 - Zero Trust](https://shawnharry.co.uk/2020/02/10/m365-zero-trust/) - [embeddoc url="https://shawnharry.co.uk/wp-content/uploads/2020/02/MsftZeroTrust.pdf" download="all"]
- [Poly CCX500 Review](https://shawnharry.co.uk/2020/02/14/poly-ccx500-review/) - The Poly CCX is a new line from Poly that supports native Teams phones. All CCX models can be purchased with or without a handset. I choose to go with the CCX500 model with a handset as in my experience this is the more common use case for general population. I've yet to see any
- [Managing Poly Teams Phones with the Poly Device Management Service](https://shawnharry.co.uk/2020/02/19/managing-poly-teams-phones-with-the-poly-device-management-service/) - PDMS is a Cloud subscription service from Poly that allows for management of native Teams phones as well a host of other SIP and Skype for Business Endpoints such as the VVX, CX, Soundstation, Trio and more. PDMS started life as Real Presence Resource Manager which is an on-premises solution for device and life-cycle management.
- [Yealink USB Device Management](https://shawnharry.co.uk/2020/02/25/yealink-usb-device-management/) - Pottering around in Yealink Management Cloud Service | Enterprise I recently noticed a USB Device Management feature. My immediate thought was awesome life cycle management for USB devices! Unfortunately this isn't the case, despite it being under the Device Management section of YMCS, which makes you think life cycle management such as patching, configuration, device recovery etc are
- [Configuring E911 with Microsoft Teams Direct Routing & Audiocodes](https://shawnharry.co.uk/2020/03/11/configuring-e911-with-microsoft-teams-direct-routing-audiocodes/) - Introduction E911 is a national emergency service for many countries, enabling E911 operators to automatically identify the geographical location and phone number of an emergency caller. In E911, the emergency called number is routed to the nearest E911 operator, termed public safety answering point (PSAP) based on the location of the caller. Automatic identification of
- [Installing Oracle SBC in Azure for Microsoft Teams](https://shawnharry.co.uk/2020/03/23/installing-oracle-sbc-in-azure-for-microsoft-teams/) - Oracle is one of four vendors currently supported for Microsoft Teams Direct Routing. Unfortunately Oracle doesn't provide an ARM template nor an appliance in the Azure Marketplace for their Virtual Machine Edition of their E-SBC. So this post will cover the installation steps for installing an Oracle VME E-SBC into Azure. I'm going to assume
- [Using Audiocodes OVOC to troubleshoot Microsoft Teams Direct Routing calls](https://shawnharry.co.uk/2020/04/09/integrating-audiocodes-ovoc-sbc-to-monitor-microsoft-teams-direct-routing/) - Overview AudioCodes One Voice Operations Center (OVOC) is a voice network management solution that combines management of voice network devices and quality of experience monitoring into a single web-based application. OVOC enables administrators to simplify lifecycle management of Audiocodes network elements such as Session Border Controllers, Analog Telephony Adaptors, IP Phones, Branch Routers and more
- [Microsoft Teams Voice Survivability with Yealink Phones](https://shawnharry.co.uk/2020/04/09/microsoft-teams-voice-survivability/) - This has been a recent hot topic affecting Microsoft Teams that i decided to it give some attention. In fact my colleagues Randy Chapman , Mark Vale and I discussed this at length on our UCStatus Podcast - UCStatus Podcast Episode 3: Teams Telephony, Resiliency & Suvivability which incidentally was only a few days after a
- [Teams Phones "User Account Based Experiences"](https://shawnharry.co.uk/2020/05/08/teams-phones-user-account-based-experiences/) - Last year at Microsoft Ignite it was announced a new feature called "User Account Based Experiences" was coming to native Teams Phones. This feature allows for three different user interfaces and thus user experiences from the Teams Phone App. This is a really useful feature as it allows admins to modify the user interface to
- [Microsoft Teams Media Optimisation for Windows Virtual Desktop](https://shawnharry.co.uk/2020/06/02/microsoft-teams-media-optimisation-for-windows-virtual-desktop/) - Introduction I've personally been waiting in anticipation for some time for the release of Media Optimisation for Windows Virtual Desktop. For those that recall the history of the Citrix HDX and even its Remote Desktop equivalent on Lync Server 2013 Media Optimisation was designed to improve the user experience by ensuring media flows directly between
- [AudioCodes OVOC Device Management](https://shawnharry.co.uk/2021/01/08/audiocodes-ovoc-device-management/) - The latest version of the One Voice Operations Centre includes support for native Microsoft Teams phones. This is good news as to date the management story for Audiocodes phones has been limited to the Microsoft Teams Admin Centre (MTAC) which is mostly just management of the Teams App that runs on the phone hardware with
- [Configuring Azure AD authentication with AudioCodes SmartTAP 360](https://shawnharry.co.uk/2021/02/05/configuring-azure-ad-authentication-with-audiocodes-smarttap-360/) - Available on the Microsoft Azure Marketplace, AudioCodes SmartTAP 360° is a compliance call recording solution for recording Microsoft Teams voice, video and instant messaging (IM) interactions. SmartTAP can also be deployed and integrated with Skype for Business, or any enterprise PBX when connected to an AudioCodes SBC when using the SIPREC protocol to record PSTN
- [Configuring SIPREC for Microsoft Teams Direct Routing with SmartTAP](https://shawnharry.co.uk/2021/02/13/configuring-siprec-for-microsoft-teams-direct-routing-with-smarttap/) - SIPREC is an IETF SIP based protocol used for recording VoIP calls. As its an open standard it has common support among many PBX vendors and SBCs. AudioCodes SmartTAP product has supported the SIPREC standard for many years and SIPREC can be used for recording Microsoft Team calls too without the need for deploying Microsoft
- [Manually register Audiocodes phone to OVOC over the Internet](https://shawnharry.co.uk/2021/07/20/manually-register-audiocodes-phone-to-ovoc-over-the-internet/) - Audiocodes have recently provided support for registering a phone over the Internet (EG your phone is behind a NAT) to OVOC, namely the Device Manager Pro component of OVOC. This hasn't been an easy journey for those familiar with some of the technical caveats as previously this required the use of VPNs, or deploying OVOC
- [Enabling Teams QoE reports in AudioCodes OVOC](https://shawnharry.co.uk/2021/07/21/enabling-teams-qoe-reports-in-audiocodes-ovoc/) - AudioCodes has introduced a new feature into the One Voice Operations Centre that allows OVOC to pull Microsoft Teams Call Detail Records (CDR) and Call Quality Dashboard Online (CQDO) telemetry data into OVOC effectively providing a single pane of glass for troubleshooting all your Microsoft Teams VoIP and PSTN calls. If you're familiar with troubleshooting
- [Configuring Azure AD SSO for Crestron XiO](https://shawnharry.co.uk/2022/03/24/configuring-azure-ad-sso-for-crestron-xio/) - Crestron XiO allows you to use an external domain to Single Sign On (SSO) to the XiO portal. In a production environment its preferable to use your own domain and thus identity's for logging into XiO rather than the default Crestron.io domain. The Crestron.io domain is managed by Crestron. Therefore they manage all of the
- [Configuring Microsoft Entra SSO for YMCS](https://shawnharry.co.uk/2024/02/28/configuring-microsoft-entra-sso-for-ymcs/) - Previously Yealink Management Cloud Service only provided support for native Yealink Identity's within YMCS for managing Yealink devices. With the recent update to the service Yealink now supports the ability for administrators to use their Corporate or Company Microsoft Entra Identity's to login to YMCS. This is an important and great addition to the service
- [Is Artificial Intelligence, intelligent?](https://shawnharry.co.uk/2024/11/02/is-artificial-intelligence-intelligent/) - Personally I've never been a fan of the term Artificial Intelligence simply because in my opinion its not a particularly accurate term. Intelligence requires understanding of consequence, which invariably can only be limited to the realms of human activity or better put human decision making. Animals are also capable of intelligence and like humans are
- [Enabling remote control on Crestron Teams phones](https://shawnharry.co.uk/2021/06/28/enabling-remote-control-on-crestron-teams-phones/) - Crestron has introduced a new range of Teams certified phones called Flex. Previously Crestron used to white label Yealink handsets but these were discontinued last year. Their new Flex range is a vast improvement on the previous Crestron handsets and really is beautiful range that comes in varying models, with or without handset, an 8
- [Enabling AudioCodes Compliance Recording SmartTAP Teams App integration for the Microsoft Teams Desktop Client](https://shawnharry.co.uk/2021/06/04/enabling-audiocodes-smarttap-app-in-the-microsoft-teams-client/) - AudioCodes has a really cool integration with the Microsoft Teams client that enables an administrator or a compliance call recorded user to be able to manage the SmartTAP server or see their recordings. This is certainly a very useful feature so CR users can listen to recordings easily from within their Teams client. There are
- [Windows Virtual Desktop Management Tool Experience](https://shawnharry.co.uk/2019/11/30/windows-virtual-desktop-management-tool-experience/) - Background This post is not going to cover installation for WVD as there are many and far better blogs that cover the set up process already. This post will only cover at a very high level the installation of the Management Tool web app which can be used to manage a WVD tenant, with a focus
- [Zscaler and Microsoft Teams Media Optimisation](https://shawnharry.co.uk/2019/11/17/zscaler-and-microsoft-teams-media-optimisation/) - Introduction I just want to say this is largely an opinion piece based on what I've seen in the field with Microsoft Teams and Zscaler. Id love to see a whitepaper from Zscaler that covers the expected media establishment behaviour for Teams when Zscaler Internet Access is deployed but in all the years I've been
- [Installing Audiocodes Cloud Edition in Azure](https://shawnharry.co.uk/2019/11/16/installing-audiocodes-cloud-edition-in-azure/) - This blog post will only cover the core configuration necessary for installing Cloud Edition. I will not cover trunk configuration to Microsoft Teams or interop with any other platforms. Nor will this this post cover any other SBC features. This post assumes readers are familiar with Azure. Introduction Audiocodes Cloud Edition is the first Session
- [Zoom Microsoft Teams Interoperability](https://shawnharry.co.uk/2019/09/28/zoom-microsoft-teams-interoperability/) - Zoom supports two types of integration with Skype for Business Online and Skype for Business Server, 1) Native Federation using your Lync or Skype for Business Edge Server, or Skype for Business Online and 2) CTI -software based- integration using a client side plugin that launches the Zoom client. Zoom Skype for Business (Lync) Plugin
- [Teams Desktop - Citrix Full VDI Support Roadmap](https://shawnharry.co.uk/2019/05/24/teams-desktop-citrix-full-vdi-support-media-offload/) - Fast Publish Teams Citrix VDI roadmap is taken from Citrix Synergy TV - SYN211 - HDX: Its all about the user experience@ 21:54 Highlights New media Engine. Not based on previous SfB RTOP (Real Time Optimisation Pack) RTME architecture. Citrix Virtual Apps and Desktops (CVAD) 1906 will be the first released to support
- [Installing Ribbon (Sonus) SBC in Azure](https://shawnharry.co.uk/2019/03/27/installing-ribbon-sonus-sbc-in-azure/) - Ribbon alongside Audiocodes and Anynode are all vendors certified for direct routing who have appliances in the Azure marketplace that can be utilised for providing PSTN/telephony connectivity via your chosen Internet Telephony Service Provider. Deploying virtual SBC's into a Public Cloud allows for a significant amount of flexibility and provides many advantages for customers pursuing
- [NIST Cloud Reference Architecture](https://shawnharry.co.uk/2019/03/06/nist-cloud-reference-architecture/) - https://bigdatawg.nist.gov/_uploadfiles/M0008_v1_7256814129.pdf
- [Microsoft 365 - License Map](https://shawnharry.co.uk/2019/02/15/microsoft-365-e3-e5-plans/) - Very useful infographics breaking down M365 Licensing from Aaron Dinnage and Paul Maggs Download link for Aarons license diagrams can be found here. Download link for Pauls license diagram can be found here. [embeddoc url="https://shawnharry.co.uk/wp-content/uploads/2020/12/Microsoft-365-Enterprise.pdf" download="all" viewer="browser"] [embeddoc url="https://shawnharry.co.uk/wp-content/uploads/2019/02/2020-12-m365-licensing-v1.0.pdf" download="all" viewer="browser"]
- [Checking Microsoft Teams Call Quality prior to joining an audio call](https://shawnharry.co.uk/2019/02/13/testing-microsoft-teams-call-quality-prior-to-joining-a-call/) - Skype for Business Server was able to check call quality prior to making a call. This feature was useful for accessing potential call quality issues that could impact your call, the network of course being vitally important to the quality and success of VOIP/PSTN calls. Unfortunately this feature has never been available in Skype for
- [Deskilling in IT due to the Cloud](https://shawnharry.co.uk/2019/01/28/deskilling-in-it-due-to-the-cloud/) - One of the intended or unintended consequences of 'automation' which the Cloud has foisted upon Information Technology in the work place is the loss of expertise. I think we can agree that this deskilling trend is certainly not an accident for customers who are considering Cloud adoption. Cloud offers many benefits in regards to delivery of IT
- [Installing and integrating Pexip Infinity in Azure with Microsoft Teams (CVI)](https://shawnharry.co.uk/2019/01/17/installing-and-integrating-pexip-infinity-in-azure-with-microsoft-teams-cvi/) - This is a level 100 build guide on the high level steps i took to deploy, configure and test Pexip Cloud Video Interop in Azure with Microsoft Teams. The Pexip Infinity platform can be deployed in a dedicated public or hybrid cloud. I chose to install it in Azure so the service was geographically as
- [Sipgate SIP (PSTN) trunk with Microsoft Teams Direct Routing via an Audiocodes SBC in Azure](https://shawnharry.co.uk/2019/01/14/sipgate-sip-pstn-trunk-with-microsoft-teams-direct-routing-via-an-audiocodes-sbc-in-azure/) - Sipgate are an ITSP who provide ‘free’ UK DIDs for inbound PSTN calling. Your account needs to be in credit to place outbound calls to the PSTN. https://www.sipgatebasic.co.uk/ This brief guide covers the steps for placing calls to and from the PSTN using Microsoft Teams with a Sipgate DID via an Audiocodes Virtual Edition SBC
- [Moving a Skype for Business Server user directly to Microsoft Teams](https://shawnharry.co.uk/2019/01/11/moving-a-skype-for-business-server-user-directly-to-teams/) - The new -MoveToTeams switch included with the January 2019 Skype for Business 2015 CU includes some new additional switches. On testing the move via Powershell I encountered the error below due to the fact the test user I was moving was not enabled for Audio Conferencing. As I didn’t have an available license for ACP
- [Configuring Yealink T58A for Microsoft Teams](https://shawnharry.co.uk/2019/01/07/configuring-yealink-t58a-for-microsoft-teams/) - Yealink was certified for Microsoft Teams last month - December 2018. The Teams firmware was made generally available today. https://docs.microsoft.com/en-us/microsoftteams/buying-and-deploying-teams-ip-phones The latest Teams firmware can be found here:- http://support.yealink.com/documentFront/forwardToDocumentDetailPage?documentId=261#frnotes As of the date of publishing 58.15.0.20 is the latest firmware available. 58.15.0.20 inclues a newer web UI. Note the firmware and Teams versions. All available
- [Make Teams the default client for Click to Dial](https://shawnharry.co.uk/2018/10/11/make-teams-the-default-client-for-click-to-dial/) - The following registry keys can be used to make Teams the default client for TEL: SIP: IM: CallTo. These keys can be used on Windows 7 or Windows 10. https://support.office.com/en-us/article/What-s-new-in-Microsoft-Teams-d7092a6d-c896-424c-b362-a472d5f105de "Dive right into Teams from im:, sip:, and callto: links On Windows, if you click one of these link types, you'll be able to go
- [Hybrid Modern Authentication for Skype for Business Server & Exchange Server 2016](https://shawnharry.co.uk/2018/05/18/hybrid-modern-authentication-for-skype-for-business-server-exchange-server-2016/) - Hybrid Modern Authentication for Skype for Business Server & Exchange Server 2016 Detailed configuration and troubleshooting steps are covered here and here for enabling HMA for Exchange and Skype for Business respectively. Skype for Business Server 2015 May 2017 cumulative update supports Hybrid Modern Authentication (HMA). To use HMA with SfB on-premises an on-premises
- [Whats the impact of the Cloud 'Technological' Industrial Revolution?](https://shawnharry.co.uk/2018/01/11/whats-the-impact-of-the-cloud-technological-industrial-revolution/) - This is a subject id love to see more discussion and dialogue about. Interestingly as a science fiction genre there have been some thought provoking TV series such as the Netflix's "Black Mirror" to films like "Automata", "iRobot", "Minority Report" and many more all of which cover the social effects of human interaction with technology
- [Installing and Configuring the Azure Site Recovery Deployment Planner](https://shawnharry.co.uk/2017/12/20/installing-and-configuring-the-azure-site-recovery-deployment-planner/) - The Azure Site Recovery deployment planner (version ASR Deployment Planner_v2.0.1) is a command-line tool available for both Hyper-V to Azure and VMware to Azure disaster recovery scenarios. This tool is used to profile VMs (with no production impact) to understand the bandwidth and Azure Storage requirements for successful replication and test failover. This tool can
- [Azure Migrate](https://shawnharry.co.uk/2017/11/05/azure-migrate/) - Azure migrate is a feature currently in preview in Azure that can help considerably with a transition to Azure. Moving workloads to Azure from on-premises is greatly simplified with this new tool as it helps with the following: - Easily discovers all on-premises virtual machines Understands app interdependencies Right-sizes new cloud resources based on utilisation
- [Is "Unified Communications" dead?](https://shawnharry.co.uk/2017/10/05/is-unified-communications-dead/) - Is the well the established marketing term "Unified Communications" dead? This may seem like a bit of a hyperbolic headline but in my opinion the term Unified Communications is essentially dead, outdated, or at best should be treated as a legacy term to describe legacy integrations between vendors, EG Cisco and Skype for Business (Lync)
- [Troubleshooting Microsoft Teams with 'Charles' http debugger](https://shawnharry.co.uk/2017/10/02/troubleshooting-microsoft-teams-with-charles-http-debugger/) - Charles is an HTTP proxy / HTTP monitor / Reverse Proxy that enables a developer to view all of the HTTP and SSL / HTTPS traffic between their machine and the Internet. This includes requests, responses and the HTTP headers (which contain the cookies and caching information). Charles can be downloaded from here:- https://www.charlesproxy.com/ Charles
- [How to Set up Azure AD Certificate-Based Authentication (CBA) for Skype for Business Online (Android)](https://shawnharry.co.uk/2017/08/24/how-to-set-up-azure-ad-certificate-based-authentication-cba-for-skype-for-business-online-android/) - Setting up CBA is already covered in detail here: - https://blogs.technet.microsoft.com/microscott/how-to-set-up-azure-ad-certificate-based-authentication-for-office-apps-on-mobile-devices-ios-and-android-part-1/ https://blogs.technet.microsoft.com/microscott/how-to-set-up-azure-ad-certificate-based-authentication-for-office-apps-on-mobile-device-ios-and-android-part-2/ https://blogs.technet.microsoft.com/microscott/how-to-set-up-azure-ad-certificate-based-authentication-for-office-apps-on-mobile-devices-ios-and-android-part-3/ https://blogs.technet.microsoft.com/microscott/how-to-set-up-azure-ad-certificate-based-authentication-for-office-apps-on-mobile-devices-ios-and-android-part-4/ This post covers my notes and findings on how to configure CBA as the deployment and architecture is relatively complex. Topology Certificate Based Authentication for SfBO mobile users is provided by a combination of ADFS and the on premises Certificate Authority
- [Lab configuration for CCE in Azure notes](https://shawnharry.co.uk/2017/08/11/lab-configuration-for-cce-in-azure-notes/) - Background This post is a follow up from the “Nested Virtualisation in Azure” post detailing some of the steps taken for configuring a functional installation of CCE in Azure. This post covers my engineering notes and is not a prescriptive guide on all steps required to install a functional CCE successfully in Azure. A full
- [Updating VVX Phones with Resource Manager](https://shawnharry.co.uk/2017/07/25/updating-vvx-phones-with-resource-manager/) - Upload Firmware Download the latest FW from here: - http://support.polycom.com/PolycomService/home/home.htm Navigate to Endpoint>Phone Management>Upload Software Updates Click on the + radio button. Upload FW. Create Configuration Profile Navigate to Endpoint >Phone Management >Configuration Profiles Click on the + radio button. Give the new profile a name. This profile will be associated with an Endpoint
- [Installing Skype for Business Cloud Connector Edition (CCE) .msi on a Windows Server 2016 (Hyper-V) host](https://shawnharry.co.uk/2017/07/18/installing-skype-for-business-cloud-connector-edition-cce-on-a-windows-server-2016-hyper-v-host/) - Background Important: - This is not currently supported. CCE is only supported at present on Windows Server 2012 R2 Datacenter Edition as per the link below. https://technet.microsoft.com/en-gb/library/mt605227.aspx?f=255&MSPPError=-2147217396 “Before you deploy Cloud Connector Edition, make sure you have the following for your environment: For the host machine - Cloud Connector VMs must be deployed on dedicated
- [Nested Virtualization in Azure](https://shawnharry.co.uk/2017/07/14/nested-virtualization-in-azure/) - Background For lab/demo purposes nested virtualization was pursued for the purpose of understanding the configuration required for Skype for Business Online Cloud Connector Edition (CCE). This was primarily to walk through and familarise myself with the steps of installing CCE and not neccesarily for producing a working hybrid configuration of CCE in Azure with SfBO/O365.
- [Manual VVX configuration for Polycom Resource Manager](https://shawnharry.co.uk/2017/07/04/manual-vvx-configuration-for-polycom-resource-manager/) - The below can be accomplished using DHCP options 66 & 160. For the purposes of testing one phone though a manual configuration may be preferable. Under the Provision Server tab the following server address must be entered. Enter “[YourIPAddress]/phoneservice/configfiles” as the server address. Server type must be HTTP. As the default PlcmSpIp account is used
- [Steps to enable modern authentication for Skype for Business Online](https://shawnharry.co.uk/2017/06/24/steps-to-enable-modern-authentication-for-skype-for-business-online/) - This article is applicaple to Office 365 only. EG Skype for Business Online with no hybrid or premise connectivity. The following technet wiki was used to understand the configuration: https://social.technet.microsoft.com/wiki/contents/articles/34339.skype-for-business-online-enable-your-tenant-for-modern-authentication.aspx Per service state of modern authentication by default for Office 365: • Skype for Business Online - OFF by default. • Exchange Online - OFF by default.
- [Trio8800 admitted into lobby when using a 'private' meeting](https://shawnharry.co.uk/2017/05/31/trio8800-admitted-into-lobby-when-using-a-private-meeting/) - The following has been verified as a bug in the latest Trio FW 5.4.5.9188 build. The previous FW 5.4.5.9111 also exhibits the same behavior. Wether a private or public SfB meeting is used the expected behavior is the meeting room should be admitted to the conference automatically when using the default settings in the conference
- [Disable Certificate Check SfB](https://shawnharry.co.uk/2017/05/21/disable-certificate-check-sfb/) - Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL] "EventLogging"=dword:00000001 "ClientAuthTrustMode"=dword:00000002
- [Prince2 Methodology](https://shawnharry.co.uk/2017/03/18/prince2-methodology/) - Each of the 7 processes are shown by the large coloured rectangles. These are: Directing a Project, Starting Up a Project, Initiating a Project, Controlling a Stage, Managing a Stage Boundary, Managing Product Delivery and Closing a Project. The diagram above shows the 7 PRINCE2 processes. These are the large coloured rectangles on the diagram.
- [SfB\Lync Passive Authentication - Resource Forest Topology](https://shawnharry.co.uk/2017/03/18/sfblync-passive-authentication-resource-forest-topology/)
- [McAfee AV Skype for Business bug](https://shawnharry.co.uk/2017/03/18/mcafee-av-skype-for-business-bug/) - Symptom: The Front End service would not start due to incorrectly placed certificates in the Trusted Root container. This script https://gallery.technet.microsoft.com/LyncSkype4B-Certificate-81944851 was used to check the certificate containers and two root certificates were found incorrectly placed in the Trusted Root container. Example output:- Resolution: The below registry key was enabled as a temporary workaround:- Windows
- [Edge Server Hardening for SSL](https://shawnharry.co.uk/2017/03/17/edge-server-hardening-for-ssl/) - To resolve the Poodle vulnerability and harden the Edge Server download and install the following tool from Nartac Software https://www.nartac.com/Products/IISCrypto/Download After installing select ‘best practices’ and apply the suggested fixes. The keys will be written to the following path: “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control \SecurityProviders\SCHANNEL\Protocols” Browse to Qualys SSLs checker and scan the Edge Server. https://www.ssllabs.com/ssltest/ The rating score
- [Skype for Business Split Brain](https://shawnharry.co.uk/2017/03/17/skype-for-business-split-brain/) - Summary: After initiating a successful failover of the Central Management Store and Pool failback of the CMS failed. The topology reported the CMS as being homed on the primary pool, but the Get-CsManagementStoreReplicationStatus –CentralManagementStoreStatus cmdlet reported the CMS as still being on the backup pool. The ActiveMasterFqdn shows the active CMS for the topology. Failback
- [Whitelisting Skype for Business URLs when using the BlueCoat Unified Agent and Direct Access](https://shawnharry.co.uk/2017/03/17/whitelisting-skype-for-business-urls-when-using-the-bluecoat-unified-agent-and-direct-access/) - Summary: The topology consisted of Skype for Business Server deployed alongside Direct Access. To preserve call quality ALL SfB traffic was not be tunnelled by DA or any other solution that deployed a VPN secure tunnel as did the Blue Coat Unified Agent. The following article covers extensively why SfB/Lync traffic should not be
- [SfB OpenOTP MFA integration using Passive Authentication](https://shawnharry.co.uk/2016/10/10/sfb-openotp-mfa-integration-using-passive-authentication/) - SfB OpenOTP MFA integration using Passive Authentication The following is supplemental to the WebADM Install Guide only. Server specification Ubuntu 12.04 was used for the integration using a Basic_A1 (1 core, 1.75 GB memory) VM. The server was installed manually to support installation of OpenOTP in Azure. Otherwise pre-installed VM Appliances can be used for
- [Skype for Business Online Intune Conditional Access Integration](https://shawnharry.co.uk/2016/10/10/skype-for-business-online-o365-intune-conditional-access/) - Skype for Business Online Intune Conditional Access Integration Intune provides the following integration for SfB Online (O365):- • MDM • MAM using app policies and conditional access • ADAL authentication Enable CA in SfB Online Policy in Intune. CA is not supported for Windows Phone. App policy support is only available for the iOS &
- [Cloud PBX ExUM integration](https://shawnharry.co.uk/2016/10/10/cloud-pbx/) - Azure Lab was used for this test. SfB Hybrid and Exchange Hybrid are already configured and one user was enabled and licensed for Cloud PBX. Exchange 2016 RTM was used for testing. All other prerequisites are satisfied as per the KB. https://support.microsoft.com/en-us/kb/3195158 Configuration steps 1. Verify that DNS records for your on-premises Exchange infrastructure have
- [Skype for Business Unleashed](https://shawnharry.co.uk/2016/10/10/skype-for-business-unleashed/) - Skype for Business Unleashed I had the pleasure of being a contributing writer along with the other writers below for the newly released publication Skype for Business Unleashed (12/8/2016). I’m quite familiar with the unleased series of books having used Exchange 2007, 2010 and Lync 2010, 2013 Unleashed for a number of years as
- [AWS Lab](https://shawnharry.co.uk/2016/10/10/aws-lab/) - AWS UC Cloud Lab
- [Azure Lab](https://shawnharry.co.uk/2016/09/11/azure-lab/) - Azure UC Cloud Lab

## Pages

- [Home](https://shawnharry.co.uk/) - Shawn Harry Microsoft 365 Enterprise Solution Architect About Me I’m a Microsoft 365 Enterprise Solution Architect, who specialises in Unified Communications with a primary focus on Microsoft Teams, Security & Compliance with Defender and Purview, Intune, Exchange Online and Microsoft Azure. I’m also a co-host of the UC Status podcast. This is a Microsoft

## Portfolio

- [CompTIA Project +](https://shawnharry.co.uk/portfolio_page/comptia-project/)
- [Quest ODM for Active Directory](https://shawnharry.co.uk/portfolio_page/quest-odm-for-active-directory/)
- [Quest ODM for M365](https://shawnharry.co.uk/portfolio_page/quest-odm-for-m365/)
- [Dynamics 365 CC](https://shawnharry.co.uk/portfolio_page/dynamics-365-cc/)
- [Intune](https://shawnharry.co.uk/portfolio_page/intune/)
- [Windows 365](https://shawnharry.co.uk/portfolio_page/windows-365/)
- [Azure Virtual Desktop](https://shawnharry.co.uk/portfolio_page/azure-virtual-desktop/)
- [Purview](https://shawnharry.co.uk/portfolio_page/purview/)
- [Microsoft Copilot for Security](https://shawnharry.co.uk/portfolio_page/microsoft-copilot-for-security/)
- [Skype Operations Framework](https://shawnharry.co.uk/portfolio_page/sof/)
- [Cisco Switching and Routing](https://shawnharry.co.uk/portfolio_page/cisco-switching-and-routing/)
- [Microsoft Service Adoption Specialist](https://shawnharry.co.uk/portfolio_page/microsoft-service-adoption-specialist/)
- [Microsoft Teams Rooms Solution Sales Professional](https://shawnharry.co.uk/portfolio_page/microsoft-teams-rooms-solution-sales-professional-2/)
- [Microsoft Places Technical Solution Sales Professional](https://shawnharry.co.uk/portfolio_page/microsoft-teams-rooms-solution-sales-professional/)
- [Managing Successful Programmes](https://shawnharry.co.uk/portfolio_page/managing-successful-programmes/)
- [Togaf Practitioner](https://shawnharry.co.uk/portfolio_page/togaf-practitioner/)
- [Zscaler Certified](https://shawnharry.co.uk/portfolio_page/zscaler-certified/)
- [Prince2 Certificate](https://shawnharry.co.uk/portfolio_page/prince2-certificate/)
- [Microsoft Certified IT Professional Lync Server Administrator](https://shawnharry.co.uk/portfolio_page/microsoft-certified-it-professional-lync-server-administrator/)
- [Microsoft Certified Solutions Associate](https://shawnharry.co.uk/portfolio_page/microsoft-certified-solutions-associate-2/)
- [Micorsoft Certified IT Professional](https://shawnharry.co.uk/portfolio_page/micorsoft-certified-it-professional/)
- [Project+ Certified Professional](https://shawnharry.co.uk/portfolio_page/project-certified-professional/)
- [Microsoft Solutions Expert](https://shawnharry.co.uk/portfolio_page/microsoft-solutions-expert/)
- [Microsoft Certified Solutions Associate](https://shawnharry.co.uk/portfolio_page/microsoft-certified-solutions-associate/)
- [JetNexus Certified Professional](https://shawnharry.co.uk/portfolio_page/jetnexus-certified-professional/)
- [Microsoft Certified Systems Administrator](https://shawnharry.co.uk/portfolio_page/microsoft-certified-systems-administrator/)
- [VMware Certified Professional](https://shawnharry.co.uk/portfolio_page/vmware-certified-professional/)
- [Certified Ethical Hacker](https://shawnharry.co.uk/portfolio_page/certified-ethical-hacker/)
- [Cisco Unified Presence Specialist](https://shawnharry.co.uk/portfolio_page/cisco-unified-presence-specialist/)
- [Lync Server Administrator 2010](https://shawnharry.co.uk/portfolio_page/lync-server-administrator-2010/)
- [Cisco Certified Network Associate](https://shawnharry.co.uk/portfolio_page/cisco-certified-network-associate/)
- [MS Office Communications Server 2007 Configuration](https://shawnharry.co.uk/portfolio_page/ms-office-communications-server-2007-configuration/)
- [Microsoft Certified Systems Engineer](https://shawnharry.co.uk/portfolio_page/microsoft-certified-systems-engineer/)
- [Microsoft Certified Enterprise Messaging Administrator](https://shawnharry.co.uk/portfolio_page/microsoft-certified-enterprise-messaging-administrator/)
- [Microsoft Certified Technology Specialist](https://shawnharry.co.uk/portfolio_page/microsoft-certified-technology-specialist/)
- [Microsoft Certified Technology Specialist](https://shawnharry.co.uk/portfolio_page/microsoft-certified-technology-specialist-2/)
- [Microsoft Certified Technology Specialist](https://shawnharry.co.uk/portfolio_page/micorsoft-certified-technology-specialist/)
- [Microsoft Transcript](https://shawnharry.co.uk/portfolio_page/microsoft-transcript/)
- [Certified SonicWall Security Administrator](https://shawnharry.co.uk/portfolio_page/certified-sonicwall-security-administrator/)
- [Microsoft Enterprise Security Fundamentals](https://shawnharry.co.uk/portfolio_page/microsoft-enterprise-security-fundamentals/)
- [AudioCodes OVOC](https://shawnharry.co.uk/portfolio_page/audiocodes-ovoc/)
- [IT Service Management](https://shawnharry.co.uk/portfolio_page/it-service-management/)
- [Zscaler Certified Cloud Administrator](https://shawnharry.co.uk/portfolio_page/zscaler-certified-cloud-administrator/)
- [GDPR](https://shawnharry.co.uk/portfolio_page/gdpr/)
- [Microsoft Certified IT Professional](https://shawnharry.co.uk/portfolio_page/microsoft-certified-it-professional/)
- [Microsoft Certified Solutions Expert](https://shawnharry.co.uk/portfolio_page/microsoft-certified-solutions-expert/)

## Categories

- [Uncategorized](https://shawnharry.co.uk/category/uncategorized/)
- [Lab(s)](https://shawnharry.co.uk/category/labs/)
- [Skype for Business](https://shawnharry.co.uk/category/skype-for-business/)
- [CloudPBX](https://shawnharry.co.uk/category/cloud-pbx/)
- [Polycom](https://shawnharry.co.uk/category/polycom/)
- [Teams](https://shawnharry.co.uk/category/teams/)
- [Opinion](https://shawnharry.co.uk/category/opinion/)
- [Azure](https://shawnharry.co.uk/category/azure/)
- [M365](https://shawnharry.co.uk/category/m365/)
- [Cloud](https://shawnharry.co.uk/category/cloud/)
- [Yealink](https://shawnharry.co.uk/category/yealink/)
- [Audiocodes](https://shawnharry.co.uk/category/audiocodes/)
- [Oracle](https://shawnharry.co.uk/category/oracle/)
- [Phone System](https://shawnharry.co.uk/category/phone-system/)
- [WVD](https://shawnharry.co.uk/category/wvd/)
- [Crestron](https://shawnharry.co.uk/category/crestron/)

## Portfolio Categories

- [Governance](https://shawnharry.co.uk/portfolio-category/governance/)
- [Security](https://shawnharry.co.uk/portfolio-category/security/)
- [Infrastructure](https://shawnharry.co.uk/portfolio-category/infrastructure/)
- [Service Delivery](https://shawnharry.co.uk/portfolio-category/service-delivery/)
- [Project Management](https://shawnharry.co.uk/portfolio-category/project-management/)
- [Microsoft Transcript](https://shawnharry.co.uk/portfolio-category/microsoft-transcript/)
- [Compliance](https://shawnharry.co.uk/portfolio-category/compliance/)

## Portfolio Tags

- [security](https://shawnharry.co.uk/portfolio-tag/security/)

## Testimonials Categories

- [home](https://shawnharry.co.uk/testimonials-category/home/)