Encountered an error while attempting to perform an LDAP search for all Lync Server attributes on user object %1. The error ...

Encountered an error while attempting to perform an LDAP search for all Lync Server attributes on user object %1.  The error was %2, (%3) This user update has been skipped, and this user may not be enabled for SIP as a result.  This error usually occurs when the Lync Server service account doesn't have enough permissions to read the attributes on the above user object.  If this user is supposed to be enabled for Lync Server, then try to fix the problem, then disable and enable the user for SIP to resynchronize him/her.