There is something red on my Communicator 2007 R2 client, and when ctrl + click the Communicator taskbar icon it says this:

GAL Status;https://ocspool.work.domain.com/Abs/Int/Handler;Cannot synchronize with the corporate address book. This may be because the proxy server setting in your web browser does not allow access to the address book. If the problem persists, contact your system administrator.;

So i try to open the url in IE to see that it is not related to a certificate and it is not because i can not even log in, and after 3 tries I’m off to the 401.

So my next attempt is on the front end OCS 2007 R2 server and i try from there as a domain admin, does not work. Well ill just try with https://localhost/abs/int … and guess what that works, so it has to do with Kerberos or something..

So ill do the following

C:\Windows\System32\inetsrv>setspn -A HTTP/ocspool.work.domain.com RTCCOMPONENTSERVICE

Registering ServicePrincipalNames for CN=RTCComponentService,CN=Users,DC=work,DC=domain,DC=com

HTTP/ocspool.work.domain.com

Updated object

C:\Windows\System32\inetsrv>iisreset

And it works… well you have to add your fqdn pool name to the command to get it to work for you though.

Ok this sounded a little to easy, you have to add like 3 hours on google to this as well…..