Access Denied to Address Book Folder


After installing a new Lync 2013 Standard Edition server, the event log continually presented the following error:

Address Book Server has encountered an unexpected exception.

Exception: Access to the path ‘LyncServerFQDNLyncFileShare1-WebServices-2ABFiles0000000-0000-0000-0000-0000000000000000000-0000-0000-0000-000000000000’ is denied.

Exception Type: System.UnauthorizedAccessException

   at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
   at System.IO.Directory.InternalCreateDirectory(String fullPath, String path, Object dirSecurityObj, Boolean checkHost)
   at System.IO.Directory.InternalCreateDirectoryHelper(String path, Boolean checkHost)
   at Microsoft.Rtc.ABServer.ABServer.ReadContactsFromSqlAndWriteToOutput(NormalizeRuleSet normalizationRules, SqlConnection sqlConnection, List`1 sinks)
   at Microsoft.Rtc.ABServer.ABServer.Synchronize()
Cause: Internal Error
Resolution: Contact Product Support Services.

To resolve the issue I had to manually add the following local system groups to the folders sharing permissions:

LOCALRTC Local Administrators                  CHANGE,READ
LOCALRTC Local Config Replicator             CHANGE,READ
LOCALRTC Server Local Group                    CHANGE,READ
LOCALRTC Component Local Group            CHANGE,READ

After adding these and running Update-CsUserDatabase I immediately could see the creation of the expected Address Book files.

Checking other deployments these permissions were not listed, so I am unsure why in this case they were required.



Please enter your comment!
Please enter your name here