I came across a great tool that helps troubleshoot DNS issues relating to Lync or OCS sign-in trouble. It queries your SIP domain for the required DNS records, especially helpful to determine which SRV records exist and which need to be added. More info from http://www.insideocs.com/Tools/MOCLogin.htm.