Hello Folks,
Today we’ll talk about kerberos authetication. Lync uses NTLM and kerberos autentication for Web Services. Due the Lync Server uses NetworkService to run the web services, but NetworkServices does not allow to assign SPN to it.
To solve it, you can do the next steps:
New-CsKerberosAccount -UserAccount “ucsteps\lynckerb” -ContainerDN “OU=Servers,OU=Curitiba,DC=ucsteps,DC=com”
New-CsKerberosAccountAssignment –UserAccount “ucsteps\lynckerb” –Identity “site:Curitiba”
Set-CsKerberosAccountPassword –UserAccount “ucsteps\lynckerb”
Set-CsKerberosAccountPassword –FromComputer SourceComputer –ToComputer DestinationComputer
Test-CsKerberosAccountAssignment –Identity “site:Curitiba” –Report “C:\reportpath\reportname.htm” –Verbose
Reference
https://technet.microsoft.com/en-us/library/gg398976(v=ocs.15).aspx