I'm doing a test deploy on a Lab with 3 VMs:

• TEST-DC: DC / DHCP / DNS / Root CA (Joined to TEST.AD Domain)
• TEST-CS: OCS Front End (Joined to TEST.AD Domain - IP: 10.0.128.1)
• TEST-EDGES: OCS Edge Server (Joined to Workgroup: EDGE-WKG - Internal IP: 10.0.128.3, External IPs: 192.168.129.12 - Access Edge Server, 192.168.129.13 - Web Conferencing, 192.168.129.14 - A/V)

I can login with the Communicator Client from within computers in the domain (using [email protected]) and even the Automatic Sign-In works as expected. Nevertheless, I cannot login neither from within machines in the domain nor from outside the domain using [email protected]. I'm pretty sure it is a DNS related issue, so I'm including below a list of the entries.

DNS Entries on TEST-DC:

Forward Lookup Zones

TEST.AD

• sip.test.ad (Host A). IP Address: 10.0.128.1
• sipinternal.test.ad (Host A). IP Address: 10.0.128.1
• sipexternal.test.ad (Host A). IP Address: 10.0.128.3
• _sipinternaltls._tcp.test.ad (Service Location SRV). Port: 5061. Host: sipinternal.test.ad
• _sipinternal._tcp.test.ad (Service Location SRV). Port: 5061. Host: sipinternal.test.ad
• _sip._tcp.test.ad (Service Location SRV). Port: 5061. Host: sipexternal.test.ad
• _sipfederationtls._tcp.test.ad (Service Location SRV). Port: 5061. Host: sipexternal.test.ad
• _sip._tls.test.ad (Service Location SRV). Port: 443. Host: sipexternal.test.ad

TEST.COM

• sip.test.com (Host A). IP Address: 10.0.128.1
• sipinternal.test.com (Host A). IP Address: 10.0.128.1
• sipexternal.test.com (Host A). IP Address: 10.0.128.3
• _sipinternaltls._tcp.test.com (Service Location SRV). Port: 5061. Host: sipinternal.test.com
• _sipinternal._tcp.test.com (Service Location SRV). Port: 5061. Host: sipinternal.test.com
• _sip._tcp.test.com (Service Location SRV). Port: 5061. Host: sipexternal.test.com
• _sip._tls.test.ad (Service Location SRV). Port: 443. Host: sipexternal.test.ad

Validation Errors

OCS Front End

Edge Server

I ran the OCS 2007 Automatic Sign-In Troubleshooting and all DNS entries for both TEST.AD and TEST.COM are reported to be OK.

What am I missing?