Cisco Cisco TelePresence Video Communication Server Expressway
Appendix 1 — Troubleshooting
VCS Deployment Guide: Device authentication on Cisco VCS (VCS X7.1)
Page 22 of 47
Log Code
Description
0xC0000022
Domain controller is denying access (try joining domain again)
0xC0000064
The specified user does not exist (user name does not exist)
0xC000006A
The value provided as the current password is not correct (name is correct but the
password is wrong)
password is wrong)
0xC000006C
Password policy not met
0xC000006D
The attempted logon is invalid due to a bad user name
0xC000006E
User account restriction has prevented successful login
0xC000006F
The user account has time restrictions and may not be logged onto at this time (user tried
to logon outside his day of week or time of day restrictions)
to logon outside his day of week or time of day restrictions)
0xC0000070
The user is restricted and may not log on from the source workstation
0xC0000071
The user account's password has expired
0xC0000072
The user account is currently disabled
0xC000009A
Insufficient system resources
0xC0000133
Clocks between DC and other computer too far out of sync
0xc000015b
The user has not been granted the requested logon type (aka logon right) at this machine
0xC0000193
The user's account has expired
0xC0000224
User must change his password before he logs on
0xC0000234
The user account has been automatically locked (user is currently locked out)
PC fails to login following failed login attempts using AD direct
authentication on a video endpoint
authentication on a video endpoint
If the AD Authentication has a limit to the number of failed logins that are allowed, failed logins from an
endpoint will affect authentication of anything else that uses AD to authenticate.
endpoint will affect authentication of anything else that uses AD to authenticate.
Device provisioning (TMS PE mode) and presence
SUBSCRIBE for provisioning rejected / provisioned endpoint cannot
sign in
sign in
Check that the Default Zone is configured with an Authentication policy of Check credentials or
Treat as authenticated.
•
Treat as authenticated.
•
SUBSCRIBE for provisioning and Movi sign ins will fail if the Authentication policy is Do not
check credentials.
check credentials.
•
If authentication is set to Check credentials (recommended) the appropriate username and
password must be configured in the relevant credential database.
password must be configured in the relevant credential database.
Check that the account username, the authentication credential name, and the Movi sign in
username all match (note that from X7.1 and later, usernames are case insensitive).
•
username all match (note that from X7.1 and later, usernames are case insensitive).
•
If the Movi sign in username and the authentication credential name do not match then the
initial Subscribe will be rejected as unauthorized.
initial Subscribe will be rejected as unauthorized.
•
If the Movi sign in username and the account username do not match then the Subscribe is
authenticated but the Notify is sent with Reason: rejected; Content length: 0.
authenticated but the Notify is sent with Reason: rejected; Content length: 0.