The company Logitech produces a range of (communication) video conferencing devices. From personal use, through corporate workplace equipment, to meeting (conference) rooms of all sizes. It allows the use of various platforms (providers), such as the major Microsoft Teams Rooms, Zoom Room, Google Meet or smaller ones like RingCentral, Pexip, GoToRoom or Tencent Meeting.
Basic information about Logitech solutions
Logitech Rally Bar
- Rally Bar - device description
- Rally Bar - Release Notes, Manuals, FAQ
- CollabOS - operating system for video collaboration
- CollabOS Admin Guide - administration guides
- CollabOS Release Notes - version information
Three years ago, we chose Logitech Rally Bar for our meeting rooms and we're gradually equipping additional spaces. It's not a cheap solution, but the functionality and quality are very good. The advantage is that it's a single compact device (not particularly small in size).
Rally Bar contains an intelligent 4K PTZ camera (pan-tilt-zoom camera with 5x optical and 3x digital zoom, also an intelligent viewfinder with person tracking), 6x omnidirectional microphones, 2x speakers, and an integrated computing system (computer) with the CollabOS platform. It runs Android and the specific service on it, so no additional computer is needed.
Rally Bar has 2x HDMI output with Full HD resolution and 1x HDMI input. Using this, we can display an image from a device on a TV/projector or share it in a Teams meeting. RJ45 connector for connecting to a 1 Gbps Ethernet network (also supports WiFi IEEE 802.11ac), 3x USB-A, 1x USB-C, and input for an external microphone (MIC POD).
The entire solution is constantly evolving. Logitech improves and fixes the functionality of the solution. Microsoft expands the capabilities of the Microsoft Teams Rooms client (which vary according to the Android or Windows platform).
Logitech Rally Bar works reliably even for larger meeting rooms. Officially, it's recommended to use an additional table microphone (Rally Mic Pod) for large rooms, but we've had problems with that in the past.
Tap IP
Rally Bar includes a Bluetooth remote control, but we can achieve significantly greater comfort using the Logitech Tap or Tap IP touch controller. The Tap IP controller connects to the Ethernet network and is powered by PoE. It's an official Teams Rooms Touch Console. It pairs with the Rally Bar and enables complete control. Together they form a Teams Rooms system.
Logitech manufactures additional accessories, such as the Teams Panel called Tap Scheduler. Additional microphones, the companion camera Logitech Sight, various mounts for all devices.
Logitech Sync Portal
Logitech offers the Logitech Sync service (Sync App or Sync Portal) for managing and monitoring video conferencing devices. We can use the Logitech Sync Portal where we add (connect) CollabOS devices. We then have central monitoring, can perform remote device configuration and firmware updates. The basic version is free, but we can choose a paid plan that adds additional features.
Administrative documentation Sync - Device Management Software, Sync Admins Guides.
Microsoft Teams Rooms
- Microsoft Teams Rooms - admin documentation
- Microsoft Teams Rooms - user documentation
Teams Rooms is a solution for conference rooms that enables effective communication and collaboration between people present in the room and remote participants. It's a hardware and software combination designed specifically for meeting rooms. Certified Teams Rooms systems (devices and peripherals), Teams Rooms applications running on Windows or Android, and licenses are used.
We can manage Teams Rooms devices in the Microsoft Teams admin center - Teams devices - Teams Rooms on Android.
Licenses for Teams Rooms devices
In September 2022, Microsoft changed the licensing. Until then, there were two paid versions (Standard and Premium), which were discontinued. Now it's possible to use the free Microsoft Teams Rooms Basic license. An organization can have a maximum of 25 such licenses. Or we can choose the paid Pro version, which offers more features.
It's not possible to use a user license or a Microsoft Teams Shared Devices license on Teams Rooms devices. If the correct license is not assigned, login is not possible.
Resource Account for Teams devices
Account requirements
- must be a Resource Account - Teams account with a mailbox, which is dedicated to a specific resource (e.g., a room or projector)
- it's a meeting room account; if we already have it created, it's enough to change it to a Teams Rooms resource account
- must have a mailbox and must be of type Room mailbox
- must be Password-enabled (have login capability) and have password expiration disabled
- the UPN of the account must match its SMTP address
- if we have enforced MFA, this account needs an exception
Process for creating and configuring an account
In our case, we're focusing on a configuration where we have an On-Premises AD domain and Exchange server in a hybrid architecture with a Microsoft Entra ID tenant and Exchange Online. Accounts are synchronized to Entra ID. The Teams Rooms application runs on Android.
Various options for creating an account are described in the documentation linked above. Here we'll use Exchange Management Shell (EMS), i.e., PowerShell on Exchange Server.
- create an account or use an existing Resource Account for the meeting room
- set a password and enable the account
- on the account, set
- enable Password never expires
- disable User must change password at next logon
- assign a license Microsoft Teams Rooms
Creating a new account
An account for a room mailbox is by default without a password and disabled. For Teams Rooms, you need to log in with this account, so it must be enabled and we must set a password.
New-Mailbox -UserPrincipalName meetingroom@company.com -Name "Meeting Room" -DisplayName "Meeting Room" -Alias meetingroom -Database DB1 ` -Room -EnableRoomMailboxAccount $true -RoomMailboxPassword (ConvertTo-SecureString -String 'ComplexPassword' -AsPlainText -Force)
Changing an existing Room Mailbox to a Teams Rooms resource account
Checking an existing account
[PS] C:\> Get-Mailbox meetingroom | FL Name,DisplayName,*type*,*room* Name : Meeting Room DisplayName : Meeting Room ResourceType : Room RemoteRecipientType : None RecipientType : UserMailbox RecipientTypeDetails : RoomMailbox RoomMailboxAccountEnabled : False
Modifying an existing account
Set-Mailbox -Identity meetingroom -EnableRoomMailboxAccount $true ` -RoomMailboxPassword (ConvertTo-SecureString -String 'ComplexPassword' -AsPlainText -Force)
Checking the account after modification
[PS] C:\> Get-Mailbox meetingroom | FL Name,DisplayName,*type*,*room* Name : Meeting Room DisplayName : Meeting Room ResourceType : Room RemoteRecipientType : None RecipientType : UserMailbox RecipientTypeDetails : RoomMailbox RoomMailboxAccountEnabled : True
Even though the account has a password set, we must use it in the cmdlet, otherwise we'll get an error:
You must set a password using -RoomMailboxPassword when enabling a room mailbox AD account.
To set (reset) a password, we need to have the appropriate permissions. If we lack them, we'll get an error:
You don't have permission to directly change a mailbox account password without providing old password. Reset Password role is required for directly changing password.
Adding permissions can be done through the web administration:
- Exchange Admin Center (EAC)
- Permissions - Admin Roles
- open editing for Organization Management
- add the Reset Password role
If we encounter an issue, it might help to run the following commands in EMS.
Add-pssnapin microsoft* Install-CannedRbacRoles Install-CannedRbacRoleAssignments
Close and reopen Exchange Management Shell (EMS). Now the account modification command should run successfully.
Automatic approval of meeting invitations
For a Teams Rooms account, it might be useful to set how it responds to and processes meeting invitations. Example of configuration with automatic approval.
Set-CalendarProcessing -Identity meetingroom -AutomateProcessing AutoAccept -BookingWindowInDays 360 -MaximumDurationInMinutes 1440 ` -AddOrganizerToSubject $false -AllowRecurringMeetings $true -DeleteAttachments $true -DeleteSubject $false ` -ProcessExternalMeetingMessages $true -RemovePrivateProperty $false
The automatic approval above allows processing invitations from external addresses as well. This is disabled by default. For this case, we need to enable receipt of unauthenticated messages on the mailbox, i.e., from external senders.
Set-Mailbox meetingroom -RequireSenderAuthenticationEnabled $false
We can also set up calendar sharing.
Add-MailboxFolderPermission -Identity meetingroom@company.com:\Calendar -User group-all -AccessRights Reviewer
Authentication and permissions in Microsoft 365
Microsoft states that shared Teams devices do not support Security defaults in Microsoft Entra ID. For security, we must use Conditional Access Policies (CAP). It depends on how our environment is configured.
For a Teams Rooms account, we need to allow:
- authentication without MFA
- device registration without MFA
- in Intune, enable Enrollment for Android device administrator
Conditional Access Policies (CAP)
- Microsoft Entra admin center - Protection - Conditional Access
If we have a CAP that enforces MFA, we must add the Teams Rooms account to the exceptions. Similarly, if we have CAP that requires MFA for registration or connection of devices to Entra ID, we must add an exception.
Microsoft Intune
- Microsoft Intune admin center - Devices - Enrollment - Device platform restrictions
Devices with Android systems register in Intune using Android Device Administrator. So this platform must be enabled. More information: Deploy Teams panels and Microsoft Teams Rooms on Android using Intune.
A new option is already available, which is being transitioned to. Using Android Open Source Project (AOSP) device management. Info: Moving Teams Android Devices to AOSP Device Management, Migrating Teams Android Devices to AOSP Device Management from Device Administrator.
Logitech Rally Bar and Tap IP
We can perform the initial configuration in various ways. When we have both Rally Bar and Tap IP available, it's best to set everything up using Tap IP. Log in with the Teams Rooms account using a computer. We can temporarily connect the devices at our workplace and connect Rally Bar to a monitor. Only then proceed with installation in the meeting room.
Note: Tap IP uses PoE according to IEEE 802.3af Type 1, the lowest category of 15.4 W, for power.
Of course, it's good to keep records. We can write down important data such as:
- the Teams Rooms account used
- Rally Bar / Tap IP name
- IP address
- MAC address
- serial number (SN)
- network connection (switch, port, socket)
Installation (initial configuration)
- connect both Rally Bar and TapIP to the network and power
- perform configuration using Tap IP
- set the country (Czechia), time zone (occurs automatically), and language (Czech)
- accept the terms
- Let's setup Relay - pair with Rally Bar and perform joint configuration
- on Rally Bar, press and hold the Bluetooth button for 5 seconds
- Tap IP will find the device, click for pairing and confirm with the Connect button
- a check for available updates will occur, we can let the upgrade proceed
- Select service provider - select Microsoft Teams as the provider
- information about labeling the remote control will be displayed
- Logitech Sync
- we can add devices to management at sync.logitech.com, documentation Getting Started: Provisioning Codes
- create a new room, on the Provision tab there is a Provisioning Code, which we enter on Tap IP - Enter provisioning code
- a summary of our settings will be displayed, which we confirm with the right arrow
Logging in with the Teams Rooms account
- both Tap IP and Rally Bar will display the Welcome to Microsoft Teams! screen, which contains information about logging in using a computer
- start with Tap IP and then repeat for Rally Bar
- on a computer (or mobile device), open https://microsoft.com/devicelogin
- enter the code displayed by Tap IP / Rally Bar (if it has expired, click on Refresh code)
- log in with the prepared Teams Rooms account, confirm with Continue
- the device will perform Workplace Join (registration in Entra ID and Intune, Company Portal) and account login will occur
- on Tap IP, information will be displayed that it's waiting for the paired device
- log in to Rally Bar and the Teams screen will appear on both devices
Device configuration using Logitech Sync
If we have connected the devices to the Logitech Sync Portal, we can configure them through it.
Under Meeting Rooms - Inventory, select the room (or directly the device). We can set a number of parameters, for example under System - Date and Time 24-hour format and Local Network Access for access to settings over the local network.
We can also perform bulk configuration of devices via Meeting Rooms - Settings.
Rally Bar buttons
On the back of the Rally Bar are physical control buttons.
- Reset
- Bluetooth
- Power
Turning Rally Bar on/off
Press the Power (3) button for 1 second to turn on or 10 seconds to turn off.
Factory Reset
In case of problems, we can restore factory settings and perform the configuration again.
- turn off the Rally Bar
- press and hold Reset (1)
- press Power (3)
- hold Reset for 15 to 20 seconds, then release
System Settings
We can access the system settings using the HW button Bluetooth (2), which we press three times. Or on the remote control by holding the end call button for 10 seconds. Or using Tap IP by clicking on More - Settings - Device Settings - Admin Settings.
You need to enter an access code / password (when using the remote control, press the central button on the password field to display the keyboard). The default is 1234, which should be changed. Through Tap IP, we can configure both Tap IP and Rally Bar.
Alternative options for configuring system settings are via Local Network Access or Logitech Sync.
Connect HDMI Cable Problem
Probably with some newer version, the following problem started to appear. If the display device (TV) is turned off and the Rally Bar starts up, it shows information asking us to connect the HDMI cable. When we turn on the TV, it takes a very long time to switch to standard Teams mode. A quick solution is to restart the Rally Bar.
In practice, setting automatic power-on (wake-up) has proven to be the best option. Only using Tap IP, because Rally Bar responds to movement throughout the entire room. For the connected TV, enable HDMI CEC, so turning on the Rally Bar turns on the TV (and similarly, turning it off turns off the TV).
Power Saving and Auto Wake-Up
We can configure this directly on the device or using Local Network Access (not available in Logitech Sync). It is located in system settings under System - Power-saving features.
- Power-Saving Mode - enables power-saving mode, which the device enters after 10 minutes of inactivity (if we have CEC, it turns off the TV), by default it is controlled via Teams policies
- Auto Wake-Up - controls waking up from power-saving mode
- Use Tap sensor - uses the motion sensor on the front of Tap IP
- Use built-in AI viewfinder - uses the AI Viewfinder camera on Rally Bar
- Display Controls - allows turning off/on the connected display (TV) when transitioning between power-saving modes, requires HDMI CEC, we can run a test (it will try to turn off and on the TV, reports the result)
There are no comments yet.