Hi All,

I'm having an issue with Lync downloading the GAL and hoping someone can help me.

Ok the issue is straight forward the resolution however seems to be far from simple. I should start by saying that I can search for the sip name registered in Lync server and that works but when I search for their name it doesn't.

Here is the setting which I understand is a bit strange but thats just how its been setup.

Windows Server 2012 R2

Microsoft Lync 2010

SQL Server 2008

SQL Server 2014 (not sure why both were installed but it seems to all work except the address book)

There is a separate partition for Lync Data which in the top layer has the following folders CsData, MS Lync Server 2010, RtcReplicaRoot and Share the folder share then has 1-ApplicationServer-1, 1-CentralMgmt-1 and 1-WebServices-1

Here is a list of all the things I have tried.

1. This I think is the problem!

I ran "Test-CSAddressBookService" and "Test-CSAddressBookWebQuery" and got the following results.

TargetUri  :
TargetFqdn : Server.domain.local
Result     : Failure
Latency    : 00:00:00
Error      : 403, Forbidden
Diagnosis  : ErrorCode=4004,Source= Server.domain.local,Reason=Credentials
             provided are not authorized to act as specified from URI
             Microsoft.Rtc.Signaling.DiagnosticHeader

Am I right in thing that there should be a "TargetUri" there? if so, how do I enter one?

2. When I navigate to the abs handler address https ://ServerName.Domain.Local:443/abs/handler I get error 500 internal server error

When I navigate to the abs address https://ServerName.Domain.Local:443/abs I get the HTML directory structure.

3. I have made sure that I have permissions to the Abs structure in IIS for both internal and external and permissions for the shared files.

4. I have tried to resolve it from the client side but the GAL DB files dont exist. I have also checked the GAL Status in configuration information and that displays https://ServerName.Domain.Local:443/abs/handler

5. I have turned AV and firewalls off. Due complex settings to keep out crypto locker out it was best to check but still nothing.

6. I found a guide referring to certificates which I didnt really understand as MMC didnt show a cert for lync yet get-cscertificate found 3 which had no wildcards but had all the correct names entered.

here some hints how to test the addresbook service

https://technet.microsoft.com/en-us/library/gg398661.aspx?f=255&MSPPError=-2147217396

If you run update-csaddressbook, the files on the fileshare \\share\1-webservices-1\abs\0000.... should be updated.

If you check your abs website throu the IE, you should get an authorization popup.

You can find the path of your website through press strg, right mouseclick on the Lync icon on the taskbar an than check the configuration info.

ok so when I run

Test-CsAddressBookService -TargetFqdn atl-cs-001.litwareinc.com -UserCredential $cred1 -UserSipAddress "sip:kenmyer@litwareinc.com"

I get 403, Forbidden as above.

when I run

Test-CsAddressBookService -TargetUri https://atl-cs-001.litwareinc.com/abs/handler -UserSipAddress "sip:kenmyer@litwareinc.com"

I get ERROR - no response from web-ticket service. inner exception: keyset does not exist

Just to be clear I don't have an "abs" folder in 1-webservices-1 folder but I do have "ABFiles" which has a lot of .dabs files in it once you go through all the 000000-00000 folders. When I run "update-csaddressbook" them files don't appear to change.

I do get the authentication popup when I browser to the abs website and get error 500 - internal server error when I got to the handler website. The website address in the configuration info is for the handler website.

something that might be worth noting is I'm running IIS 8.5 and running test-csaddressbookservice flags an error about IIS8.5 charset not matching.

I'm not sure if this is the issue or not.