This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(131.20000000000002, 26%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESN%3C/text%3E%3C/svg%3E)
Hello,
I have a problem with a few of my clients,
they are trying to login to the skype for business client installed in windows server 2016 , but unable to do so.
the server was recently migrated to a new network segment, but we opened up the firewall for all ports and still its not working.
its working pretty fine with same Id and host machine with old network segment.
error: server temporarily unavailable.
We have an on premise 2019 server.
upon analysing the network traffic we found that its passing the FEWEBPOOL, but when the process reaches the FEpool server, the SSL handshake does not happen, and the communications server certificate is not issued,
traffic tries and moves from pool server to pool server as its unable to connect, navigates to lyncdiscover external(which is not allowed) and the finally terminates the connection.
Would someone be able to advice ?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(112.00000000000001, 24%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJM%3C/text%3E%3C/svg%3E)
Hi @Shyam Narayan ,
Is there any error message screenshot when you sign in Skype for Business?
If client could connect to skype for business server, DNS is OK, secure TLS connection could establish successfully, you should check the following things:
1.Client should trust the Certificate issued on the Server (Client should contain the Root/Intermediate Certs)
2.FQDN/ URL that we are trying to access should be part of Certificate SAN entry on the Server where we are connecting to.
3.Required TLS Protocol & TLS cipher suites should be allowed in Firewall (If any)
For more details about how to troubleshoot sign-in issue, you can refer to:
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Hello Jimmy,
The error is
"server s temporarily unavailable"
rest of the mentioned points are checked, firewall was opened, cinet reaches FEWEBPOOL -handshake is completed and then it goes to FEPOOL server where the handshake is not completed, so connectivity is fine, DNS also should be ok as its reaches there resolving everything fine.
As for the URL: I already have it, and am stuck at a point where the handshake is not happening, No logs generated on the lync servers as well.
Hi @Shyam Narayan ,
We recommend you try to use Snooper Tool (Needs to be installed) we can open the Skype for Business client side logs located in “C:\Users\Mouli\AppData\Local\Microsoft\Office\1X.0\Lync\Tracing” to see what's happening at the application level. If there is any error message, please provide with us.
Hi @Shyam Narayan ,
Any update?