Address Book synchronization issues are common with new Lync deployments. Issues usually surface as errors in the Lync client shortly after sign-in (when the address book synchronization is first attempted) and manifest as one of these two errors:
Or, shortly after upgrading from the Communicator client, users will see the following error beneath the contact search text box:
Some address book issues are caused by a problem with the local address book files on the client machine, and other synchronization issues are caused by lack of access to the address book folder (e.g. network access), permissions, or address book configuration on the Lync server.
This post provides solutions to 4 common issues, and some basics on the Lync address book implementation to further your understanding.
Common Problems & Solutions
Four common problems and their solutions are listed below.
1] The Persistent Message “The address book is preparing to synchronize” in the Lync Client
When the Lync client is run for the first time it chooses a random time between 1 – 59 min to download the Lync address book (from the FE server). The random time is to prevent network storms if a lot of Lync clients are being deployed at the same time.
If you have had the Lync client running continuously at any time for more than 2 hours and this synchronization message is still displayed, there is likely an issue.
The solution here is to delete your existing local Lync address book files and force the download of new ones from the server:
- Shutdown the Lync client
- Force the Lync client to download the address book immediately the next time it starts:
- Open the registry to HKLM\Software\Policies\Microsoft\Communicator
- Modify (or Create) the DWORD the registry key “GalDownloadInitialDelay” and set it to 0 (that is a zero)
- This can also be done from the command line:
- reg add HKLM\Software\Policies\Microsoft\Communicator /v GalDownloadInitialDelay /t REG_DWORD /d 0 /f
- Delete the Existing Local Address Book Files:
- On Windows 7 or Vista machines, open Windows Explorer to the directory:
- %userprofile%\AppData\Local\Microsoft\Communicator\sip_user@example_domain
- Delete the files GalContacts.db and GalContacts.db.idx
- On Windows 7 or Vista machines, open Windows Explorer to the directory:
- Restart the Lync client.
• The address book should be available in less than an hour.
I have seen this work many times in production deployments.
Jeff Schertz has an excellent blog entry on the process that is used to update the Lync address book and how to force the Lync clients to update – see Updating the Lync 2010 Address Book.
2] The Lync Address Book Website does not have a Valid SSL Certificate Installed
Microsoft knowledge base article 939530 describes this problem well:
The resolution section of the KB article details how to verify that the existing certificate is valid, and how to assign another certificate if need be.
3] Symantec Antivirus Running on the Lync Server is Restricting Access to the Address Book File Share
Some versions of Symantec Antivirus running on Windows 2008 server, can cause access issues to network shares.
If you cannot map the Lync address book network share from more than one client and are running Symantec Antivirus, this is a possible cause.
This Microsoft KB article provides the details and the solution: Unable to access Shares “The specified network name is no longer available” when Symantec Endpoint Protection prior to 11.0.4202 (MR4-MP2) or Symantec Antivirus 10.2 are installed on a Windows 2003, 2008 or 2008 R2 Server.
4] VMWare Network Adapter Preventing Access or Causing Sluggish Performance to the Address Book File Share
If you are using VMWare images for either the Lync Front-End or where you are Lync address book file share resides, and are having address book synchronization issues, you should check that your virtual NIC emulator type is set to VXNET3. Problems have been seen when this is set to other emulator types such as E1000.
You can read more about the available VMWare network adapter types here: Choosing a network adapter for your virtual machine.
Address Book Basics
At a high level the server-side Lync address book consists of a Lync address book files and a web service. The majority of Lync clients download and use local copies of the address book files, but the default client policy is to also use the web service if the local address book files are not available. Administrators can control how Lync clients use the Address Book with a Lync client policy setting (see http://technet.microsoft.com/en-us/library/gg412966.aspx for more details).
The Address Book Files
Lync clients pull down the address book files from the file store configured on their home registrar pool. You can find the address book file store path by looking at the ‘File store’ property of the Lync pool in the Topology Builder (just right-click on the pool name and it is in the left-hand pane). This is the same file store that also contains the:
- The File Store for other Lync Web Services (ABFiles, CollabContent, CollabMetadata, DeviceUpdateLogs, DeviceUpdateStore, LMStaticData, MeetingComplianceData, MeetingContent, MeetingFiles, MeetingMetaData and WebAuthStore).
- CMS File Store.
- Application File Store.
A good first troubleshooting step is to see if the machine where the Lync client is running can access the Lync address book file share.
The Address Book Web Service
The Lync address book also contains a web service, and some clients (such as Lync devices) can use it instead of downloading the address book files.
The URL associated with the address book web query service can easily be found by viewing the configuration information of a signed-in Lync client. Right-click on the Lync client icon in Windows taskbar (or notification tray) and select ‘Configuration Information’. The ‘URL from Server’ gives the internal and external URLs of the address book service.
URL Internal From Server;https://<Lync Pool FQDN>:443/abs/handler
URL External From Server;https://<Lync External Web Service FQDN>:443/abs/handler
You can test the address book via the web service using the Test-CsAddressBookService and Test-CsAddressBookWebQuery cmdlet’s. The Test-CsAddressBookWebQuery cmdlet is more in-depth and tests searching and returning information. The Test-CsAddressBookService cmdlet tests the ability of a specific user to access the address book server, and can be used as follows:
Test-CsAddressBookService –TargetFqdn <pool fqdn> -UserCredential $myCred -UserSipAddress “sip:example_user@example.com”
You will need to assign the credentials for example_user to the PowerShell variable $myCred by first doing: $myCred = Get-Credential.
References
Special thanks to Steve Gover for uncovering the solutions to issues #3 and #4.
Microsoft TechNet - Lync Address Book Capacity Planning: http://technet.microsoft.com/en-us/library/gg398771.aspx
Error message when you log on to Microsoft Office Communicator: “Cannot Synchronize Address Book”



Twitter
Hi all,
I have problem with fileshare rights. My fileshare is in a separate NetApp disk configured as File server.
Try everything I found on the internet still not able to sync Address Book and certificate.
Anyone seen this problem?
I really appreciate your help.
I checked
- ISS certificate and rights
- Try to give fileshare different permission
- Publish topology and installed a Lync server components after changes
Thanks in advance
In my experience these address book access problems typically fall into two categories: 1] IIS/virtual directory configuration, or 2] Access to the share itself (e.g. NTFS permission, etc…).
Have you tried remotely browsing the Address book file share from Windows Explorer on a desktop?
1] In Topology Builder, under “File Stores”, you should see the fully qualified network path and file share.
2] If you browse to it remotely in Windows Explorer, you should see folders such as “1-ApplicationServer-1″, “1-WebServices-1″, etc…
3] There should be a sub folder called “ABFiles” in the WebServices folder
4] There should be series of ugly numericaly named sub-folders.
If you can drill into each of these sub-folders and see the address book files using ‘regular’ user credentials, you know the NTFS permission are not a problem.
You can test the address book web service using the Test-CsAddressBookService and Test-CsAddressBookWebQuery cmdlet’s. Truth be told I have found them hit-and-miss for diagnosing problems.
I do not have personal experience with hosting the AB files on a NetApp disk. You should post your question to the Microsoft Lync Server Forums if you are still having troubles: http://social.technet.microsoft.com/Forums/en-US/category/ocs/.
Hope that helps,
Curtis
Rose,
The short answer is that a NFS share cannot be used for the Lync File Share. Even if you grant RTCUniversalServerAdmins full control on the share, something with the way NFS works prevents Lync from managing the share permissions and access properly. I think you’ll find that if you move the share to a Windows server, everything will work properly. It is not clearly documented, but the RTCUniversalServerAdmins group must also be granted local admin rights on the server which hosts the share.
-Phil
Good to know Phil, thanks.
Curtis