Install and Configure Windows Server for Lync Server 2013

In this post we will see how to install and configure Windows server for Lync Server 2013. I will cover the steps to install Active Directory Domain Services, Certificate Authority. Before you begin, please take a look at Lync Server 2013 features.

Before we configure Windows Server for Lync Server 2013, we must prepare our setup. Since I am setting up this server in lab, I am going to cover the steps from scratch. If you already know how to perform the below steps, you may skip to later part of this post.

Install Windows Server for Lync Server 2013

First of all let’s install Windows Server for Lync Server 2013. On the Windows Setup, select Windows Server 2012 Datacenter (Server With a GUI). Click Next.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 1

Choose Custom : Install windows only (advanced).

Installation of Lync Server 2013 Standard Edition Part 1 Snap 2

Select the partition and click Next.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 3

Set an complex administrator password. Sign in with Administrator account.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 5

Let’s launch Server Manager and install the Active Directory Domain Services role on the computer. This machine will be our domain controller. This will also run DNS and will be our internal certificate authority.

Installing Active Directory Domain Services

Launch Server Manager, click Add Roles and Features.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 6

Click Next.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 7

Select Role-based or feature-based installation. Click Next.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 8

Choose Select a server from the server pool. Click Next.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 9

Select Active Directory Domain Services and Click Next.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 11

Don’t select anything here, click Next.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 12

Click Install.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 13

Click Promote this server to a domain controller.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 14

Choose Add a new forest. You must specify a domain name. Click Next.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 15

We will keep both Forest Functional level and Domain Functional Level as Windows Server 2012. Provide a DSRM password and click Next.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 16

The NetBIOS name for the domain will be PRAJWAL. Click Next.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 17

You may specify a different location for log files. I am not going to change anything here. Click Next.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 18

Make sure that you see the notification All prerequisite checks are passed successfully. Click Install.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 19

The Active Directory Domain Services installation begins. The server needs a restart.

Restart the server and login back. The server is now promoted to Domain Controller.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 20

Creating Lync Server Installation Account

Lets create a user account named Lyncadmin. This account will have enough privileges to install the Lync Server.

Launch Active Directory Users and Computers, Under users, right click Administrator and click copy.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 22

Specify account details.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 23

Provide a complex password. Click Next.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 24

Now right click Lyncadmin user account and select Properties. Click Member Of tab and you can see that the lyncadmin account has equal privileges as that of Administrator account.

We will not be using Administrator account to install Lync 2013 server. We will be using Lyncadmin account to install the Lync Server and other components on Member server.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 25

Installing Active Directory Certificate Services

We will now install Active Directory Certificate Services on the domain controller.

Launch the Server Manager and click Add roles and features. Select Active Directory Certificate Services.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 26

Select Certification Authority, Certificate enrollment  Policy Web Service, Certificate Enrollment Web Service, Certificate Authority Web Enrollment. Click Next.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 27

Do not select anything here, leave it to default and click Next.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 28

Click Install.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 29

Now click Configure Active Directory Certificate Services on the destination server.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 30

Click Next.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 31

On the Select Role Services to Configure, select Certification Authority and Certificate Authority Web Enrollment. Click Next.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 32

Choose Enterprise CA. Click Next.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 33

Select Root CA. Click Next.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 34

Select Create a new private key and click Configure.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 35

For Cryptography options, do not select anything and click Next.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 36

Click Next.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 37

Select the certificate validity period. Click Next.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 38

Make a note of certificate database locations. Click Next.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 39

The AD CS configuration is complete.

Installation of Lync Server 2013 Standard Edition Part 1 Snap 40

7 Comments

  1. Hey guy I can’t see Part 2

  2. Hi Prajwa
    I stuck with certificate wizard step. It indicated that the chain is invalid
    Please help me out with detail instruction
    Thanks

  3. Hi Prajwal
    I really appreciate your post. But I have some concerns, can we create those certificate like the way you show for the real Lync production? if not, please help me how to retrieve those certificate.
    And if I deploy an enterprise edition Lync 2013, can I do the same method to creat those certificate as you wrote?
    In addition, I am a new on in this Lync field. Could I contact you for experience about Lync?
    Thanks a lot Prajwal
    LE TRINH

    1. Yes you can generate certs the way i have shown for enterprise edition. I have shown the process that will cover only internal access of lync. For external access of lync there is a different procedure.

  4. Avatar photo Deepak Talreja says:

    Dear Prajwal,
    Nice to see such informative write-ups. Would like to suggest to elaborate more with some example & reasoning, so it would be more useful to everyone.
    Thanks & regards,
    Deepak Talreja
    Bangalore
    973 937 4113

    1. Thanks Deepak.. I am coming with new posts which has better explanation with examples.. Thanks for the note..

Leave a Reply

Your email address will not be published. Required fields are marked *