Hi,

We are having a problem where some users cannot sign in internally to a Lync 2013 SE server, however others are fine. The users in question have previously worked, and have been disabled the re-enabled but the problem remains. Here's the error:

1 Login: FAIL (hr = 0x1) 
CLogonCredentialManager::QueryForSpecificCreds() Credential user 0x0CBC4700 id=15 querying for specific credentials, credSuccess=2, targetName=Microsoft_OC1:uri=xatest@***.com:specific:LAD:1
1.1 ExecuteWithWindowsOrNoAuthInternal: FAIL (hr = 0x3d0000) 
Executing wws method with windows auth auth, asyncContext=0D186D58,
 context: WebRequest context@ :221590544
  MethodType:4
  ExecutionComplete? :1
  Callback@ :0CC80CDC
  AsyncHResult:80f10041
  TargetUri:https://lyncweb.***.com/WebTicket/WebTicketService.svc
  OperationName:http://tempuri.org/:IWebTicketService
 Error:
There was an error communicating with the endpoint at 'https://lyncweb.***.com/WebTicket/WebTicketService.svc'.
The server returned HTTP status code '401 (0x191)' with text 'Unauthorized'.
The requested resource requires user authentication.

.
1.2 ExecuteWithWindowsOrNoAuthInternal: FAIL (hr = 0x3d0000) 
CLogonCredentialManager::QueryForSpecificCreds() Credential user 0x0CBC4700 id=15 querying for specific credentials, credSuccess=2, targetName=Microsoft_OC1:uri=xatest@***.com:specific:LAD:1

Any Ideas?

Thanks

Hi,

Base on your description above, it can be the issue of authentication.

On the issued computer, try to do the following steps:

first renew the users certificate in Windows Certificate Manager. To do this, follow these steps:

1. Open Windows Certificate Manager. To do this, click Start, click Run, type certmgr.msc, and then click OK.
2. Double-click Personal, and then double-click Certificates.
3. Sort by the Issued By column, and then look for a certificate that is issued by Communications Server.
4. Right-click the certificate, and then click Delete.

Next, if the user is running Windows 7, remove their stored credentials in Windows Credential Manager. To do this, follow these steps:

1. Click Start, click Control Panel, and then click Credential Manager.
2. Locate the set of credentials that is used to connect to Lync Server.
3. Expand the set of credentials, and then click Remove from Vault.
4. Sign in to Lync client again and reenter the users credentials.

Finally, if the user still cannot sign in after youve updated their credentials, try deleting the RSA folder on the users computer, because it could be blocking completion of the user authentication process:

1. Sign in to the users computer using an administrator account.
2. If necessary, turn on the folder view option Show hidden files.
3. Type the following into the address bar of Windows Explorer: C:\Documents and Settings\UserName\Application Data\Microsoft\Crypto\RSA, where UserName is your Windows sign-in name.
4. Delete any folder that begins with the name S-1-5-21- followed by a string of numbers.

Best Regards,
Eason Huang