Windows 2008 R2 support for OCS 2007 R2 - guidance

It turns out that a little while ago I had discovered part of the puzzle to getting OCS 2007 R2 working on Windows 2008 R2. Strangely, a somewhat related blog entry I made around the same time was the other piece of the puzzle.

Namely, for 2008 R2 support, you need a Server 2008 R2 specific hotfix (KB 975858) and modify a few NTLM security settings that differ as defaults on Server 2008 R2 compared to Server 2008 R1.

Ideally, if you can support it in your environment, I would configure your servers and clients to be the most secure by default with use of a GPO or registry setting. That way, you are using the latest NTLM protocol with 128-bit encryption.

In the screenshot below, it shows the security setup on my laptop for client security:


Keep in mind, it is best to match these settings on the client side and server side.
If you configure the client side and do not configure the server side, you will still be able to connect.
If you configure the server side, and leave the client side at defaults, depending on the OS release, connection problems may happen due to the mismatch.

You can also read the official Microsoft guidance on Server 2008 R2 and OCS 2007 R2 here and here.

Update: I've discovered some additional issues that can be worked around. I have documented them in a new entry here.