CWA R2 / Error: 0-1-492 / Windows 2008 Server

Symptoms

When you sign in to Office Communicator Web Access R2 Web Site you receive the following error.

Cannot sign in because your computer clock is not set correctly or your account is invalid. (Error Code: 0-1-492)

Cause

This issue occurs because the Service Principal Name (SPN) of the CWA site is missing.

Resolution

In short the solution is usually just add a SPN to the CWAService account that matches the FQDN of the CWA Website.

Example: https://cwa.nwtraders.com

Followed by a reboot of the server.

My Experience

If the above does not resolve the issue, then the following will usually resolve the issue.

  1. Add CWAService account to the Local Administrator Group on the CWA Server
  2. Add CWAService account to the AD Domain Windows Authorization Access Group
  3. Disable the following on the CWA Server NIC
    1. Jumbo Packet
    2. Large Send Offload
    3. TCP Checksum Offload

Microsoft KB 968978 References above steps.