How to get SEFAutil running?

(Feb 27, 2013 - The Lync 2013 ResKit, which includes a new version of SefaUtil, is available here

(Updated with pointer to UCMA 3.0 documentation and also only describing using SEFAutil on a dedicated server. We recommend installing trusted applications on dedicated servers. However using Lync Server Management Shell cmdlets you can configure CsTrustedApplicationPool on a server already running EE/SE or Director)


SEFAUtil (secondary extension feature activation) enables Lync Server 2010 administrators and helpdesk agents to configure delegate-ringing and call-forwarding settings on behalf of a Lync Server user. This tool also allows administrators to query the call-routing settings that are published for a particular user. SEFAutil is a utility part of the Microsoft Lync Server 2010 Resource Kit Tools. It is a UCMA 3.0 application and in order for it to work you need to configure a trusted application. For more information about this look here.

The trusted application pool is related to a registrar and you need to find the SiteId of the site in which the registrar is located. You can use the PS cmdlet Get-CsSite to find the SiteId. In my case the site is called Søborg, so the cmdlet I used is the following:

  • $Site=Get-CsSite –Identity Søborg

You then need to create the trusted application pool. In my lab it is running on a dedicated server ( and the registrar is The PS cmdlet to create the trusted application pool is:

  • New-CsTrustedApplicationPool –id –Registrar -site $Site.SiteId

After having create the trusted application pool you then need to create a trusted application representing SEFAutil. The PS cmdlet to do this is:

  • New-CsTrustedApplication –ApplicationId sefautil –TrustedApplicationPoolFqdn –Port 7489

The ApplicationId needs to be sefautil, but the Port number can be whatever number you would like. After having added the trusted application pool and trusted application you need to enable the topology by issuing the PS cmdlet Enable-CsTopology.

When you run SEFAutil on a dedicated server you then need to install Lync Server 2010 on the server. The setup steps you need to perform are the following:

  • Install or Update Lync Server System
  • Install Local Configuration Store
  • Request, Install or Assign Certificates
  • Start Services

Now the infrastructure is ready and you can continue with installing the Lync Server 2010 Resource Kit Tools. When it is installed start a command prompt and run SEFAutil. The Word document describing the Microsoft Lync Server 2010 Resource Kit Tools has a good description on how to run SEFAutil.

Comments (22)

  1. Mikkelbn says:

    Again you saved the day 🙂 Thanks.

  2. Anonymous says:

    Jens – a note that the Enable-CsTopology command in your article above has a typo.

    Jens>Thanks Pat!, I've fixed it.

  3. Wilfried says:

    This is great information. I was looking for this as I could not get sefautil working on a SE server. After following these instructions it is now working. Have you tested sefautil out of the box on a SE / EE server if its working?

    Jens: Thanks! Yes, I've done a quick test on a EE/SE pool and it did work. However please remember our recommendation is a dedicated server.

  4. sachin says:

    This is great information. really useful. I eagerly wait for your blogs to come out, very good information which we will never have in documents


  5. Alexander Donin says:

    Wilfried, Jens, could You, please, clarify, what you have done to make sefautil work on SE Front End Server?

    Jens: I used the PowerShell cmdlets in the post and referenced the SE server instead of my dedicated server.

  6. greiginsydney says:

    Beware the bug in the examples in the Reskit Doco:

    If you issue the command to change a user's settings as "" the command WON'T make any change to the user's account. Re-issue the command as just "" and you'll be fine.

    Sadly SEFAUtil doesn't report an error, just fails to make the change.

    The syntax as described in SEFAUtil.exe /? is correct.

    – G.

  7. Mathew says:

    Is there a way to set simultaneous ring using SEFAUtil to a telephone number instead of a delegate? Please specify the syntax too. Thanks 🙂

    Jens: No, unfortunately it is not possible to set that setting via SEFAutil.

  8. Mathew says:

    Ouch!!! That hurts 🙁

  9. Tim says:

    Jens, great blog post thank you!

  10. Randy Wintle says:

    FYI, if you are doing this on a Lync Enterprise Edition Pool, the -Identity of the ApplicationPool should be the lync pool FQDN, not the server FQDN.

    Figured I'd pass that bit of info along!

  11. Peter says:

    Hi Jens, Could you please let us know if there will be a new SEFAutil for Lync 2013 or the one for Lync 2010 can also work with Lync 2013?

    Thank you!

    Jens>Hi Peter, there will be a new version available with the Lync 2013 ResKit, when it ships. Don't know when that is 🙂

  12. Ben says:

    Hi Jens, Could you describe the permissions required to use SEFAutil?  We would like to delegate this ability to a front-line group but are struggling to make it work.


    Jens>Hi Ben. I got it working by making the user member of CsUserAdministrator and RtcUniversalUserAdmins

  13. Ben L says:

    Forwarding to a number rather than a delegate is possible with SEFAutil.  From the documentation:

    SEFAUtil.exe / /enablefwdnoanswer /callanswerwaittime:30 /;user=phone

    The magic is the suffix appended to the E.164 telephone number.


  14. Wolfgang says:

    Hello, can i run sefautil on a SBA too?

    Jens>Yes, that is possible.

  15. Mitch says:

    should the 2010 version work on a 2013 server ? i have it installed without error but it crashes everytime I run a command

    Jens>No, I wouldn't expect that to work. Use the Lync 2010 version on a 2010 server.

  16. Shoulun says:

    Hi Jens, great blog! I'm trying to use SEFAUtil to a 2010 server. Do I install in the new 2013 Tool Kit or use the 2010 Tool Kit? Thanks!

    Jens>Hi. I would use 2010 to 2010 and 2013 to 2013.

  17. Dr.Lync says:

    Hi Jens. I have been using seautil on several occations in Lync 2010 end Lync 2013.
    But I have noticed a change in Lync 2013. When a user was offline in lync 2010 the callforwardnoanswer would still wait the time specified in /callanswerwaittime before forwarding the call.
    But in Lync 2013 when the user is offline the call is transferred immediately. The waittime is ignored. Have you tested this or have a good explanation for this? Bug or feature?
    Looking forward to your sessions in LyncConf 2014 🙂
    Jens>Thanks & Sorry, no explanation 🙂

  18. Anonymous says:

    Problem Description

    Companies that deploy Lync Enterprise Voice (EV) have the ability to easily leverage

  19. Anonymous says:

    Problem Description

    Companies that deploy Lync Enterprise Voice (EV) have the ability to easily leverage

  20. Anonymous says:

    Lately I have seen some confusion around delegates between Exchange and Lync that I wanted to help clear

  21. Anonymous says:

    I wrote this blog when my customer asked me to handle the following issue.
    UserA had made UserB a

  22. mano says:


    Is it possible to get the list of users who have enabled call forwarding in particular pool, by using SEFAutil

    Jens>No, unfortunately that is not possible. 

Skip to main content