"Unauthorized" could be caused by multiple issues:
1) CUCM > User Management > End User. Device was not associated with the user.
2) CUCM > User Management > End User. End user was not in "Standard CTI Enable" group.
3) CUCM > Device > Phone. Device or line does not have the check box "Allow Controlled from CTI" enabled.
4) CUCM > User Management > End User. There are more than one device associated with the user, but the "Line URI" in Active Directory was not able to identify the device uniquely (i.e. specifying the device name).
Take a look at http://www.lulu.com/content/5552336
Michael
http://htluo.blogspot.com