If Cisco CallManager is integrated with the DC directory (DCD) and the DCD service is in a paused state, it results in the appearance of the access denied -2200 error message when an attempt is made to add the user.
In order to fix the problem, start the DCD service manually.
The DCD service can be stopped due these reasons:
There is low disk space.
The DCD in the publisher and subscriber are out of sync.
The DCD database is too large and has too many queries from applications.