Hello,

I configured a lync server 2013 enterprise edition on sub domain. But, users can not sign in. 

Error: "You didn't get signed in. It might be your sign-in address or logon credentials, so try those again. If that doesn't work, contact your support team."

I checked clock/language/region settings. They are same with the child domain controller. 

I uninstalled and installed again the lync client. But problem continues. 

What is the problem? 

Result of Lync Connectivity Analyzer:

The credentials were not authorized by the server. Please verify your login credentials and try again.
Couldn't connect to URL https://lync.child.contoso.com/WebTicket/WebTicketService.svc/Auth
Ms-Diagnostics-Fault ErrorId: 28000, Reason: User is not SIP enabled.
Reason: Internal server error (HTTP status code 500)
Server discovery failed for secured internal channel against https://lyncdiscoverinternal.contoso.com/

Starting automatic discovery for secure (HTTPS) internal channel

• Edited by kircay 13 hours 47 minutes ago

Have you run the Lync domain prep on the domain where your users are homed?

Use the logging option on the client - this will give you a lot of information as to what is going where, and what it is trying to use and what response is being given.

Tools > Options > Logging - change to full

Log is located C:\Users\<your_alias>\AppData\Local\Microsoft\Office\15.0\Lync\Tracing

https://support.office.com/en-in/article/Turn-on-error-logs-in-Lync-eaf6602b-95e0-4c27-869f-36017475806c

Also in your results above you reference contoso - assuming this is not the exact error you got?  That is MS fake domain they use a lot so making sure it references your domain?

Yes, for creating security groups which are named RTC... 

Hi kircay,

Important: Lync shares the member groups across all domains therefore its an installation requirement for these to be prepared in the top level root of your domain and not the child.

 

To prepare the sub domain, you can run the following command.

Enable-CSAdDomain -Domain child1.contoso.com -DomainController <ChildDomainControllerFQDN>

 

From the error message, it stated the user is not SIP enabled , you can run the following command, this will force the User Replicator to discover and synchronize with all available domains.

Set-CsUserReplicatorConfiguration -Identity global -ADDomainNamingContextList $Null

 

Best regards,

Eric