Solved

No users can log into Microsoft Dynamics CRM 2011 (on premise)

Posted on 2014-10-21
16
398 Views
Last Modified: 2014-10-22
Hello experts,

One of our clients has an urgent situation, they are not able to log into Microsoft Dynamics CRM. Everything worked fine yesterday. They log in through IE and are prompted for a password. When they enter their password it is rejected (No error message). It seems somehow they have all lost permission to log in. Where do I check / set their permissions?
0
Comment
Question by:celeraadmin
  • 9
  • 6
16 Comments
 
LVL 29

Expert Comment

by:feridun
ID: 40394875
In On-premise CRM users are authenticated using their Active Directory account. The URL for the CRM website should be in the Trusted Sites or Local Intranet Zone in IE so that they are not prompted for a username.

Are you using an Internet-facing deployment?
0
 

Author Comment

by:celeraadmin
ID: 40394929
The users log in via IE with an internal URL. There is one user that logs in via an external URL. Neither of these are working. I have confirmed the site is added to trusted zone. Still rejects the password. They have SBS2011 and Server 2008 R2. The Server 2008 R2 hosts the SQL and IIS for CRM. When I try authenticate locally from the server I get the same problem. Will post screenshot.
Capture.PNG
0
 
LVL 29

Expert Comment

by:feridun
ID: 40394973
I see you are using https for the URL. Is it possible that the SSL certificate for the CRM web site has expired?

I recently had this issue with someone that was using an Internet-facing deployment with ADFS and no-one could log in when the SSL certificate expired. But the expiry problem would apply even if you are not using an IFD.
0
 

Author Comment

by:celeraadmin
ID: 40394983
I guess that is possible, this is a client that I took over so I am still getting a handle on the CRM setup. Where would I check for the expired cert?
0
 
LVL 29

Expert Comment

by:feridun
ID: 40394991
In IIS, on the Windows server where the CRM web site is installed (where the CRM server software is installed).
0
 

Author Comment

by:celeraadmin
ID: 40395023
Looks like the certificate is still valid. I get this error from a client machine when I cancel out the password prompt:

HTTP Error 401 - Unauthorized: Access is denied

<html><body><p>
An error has occurred.
<br/><br/>
Try this action again. If the problem continues, check the Microsoft Dynamics CRM Community for solutions or contact your organization&#39;s Microsoft Dynamics CRM Administrator. Finally, you can contact Microsoft Support.
</p></body></html>
0
 

Author Comment

by:celeraadmin
ID: 40395084
Definitely looks like some permission issue on the server side. When I try run a repair on the CRM server I get the attached error. Any idea on what permissions to add where?
Capture.PNG
0
 
LVL 29

Expert Comment

by:feridun
ID: 40395112
The logged on user needs to be a member of the Administrator group on the computer where SQL Server is installed and be a member of the sysadmin role in SQL Server.
0
What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 10

Expert Comment

by:tmoore1962
ID: 40395222
Since SBS probably self sign certs and they've expired?  Check certs on IIS may need to run the connection wizard again to renew the SBS certs.
0
 

Author Comment

by:celeraadmin
ID: 40395266
Where exactly in IIS do I check the certs and how do i run connection wizard?, when I checked the cert in IE it said it expires in 2016.
0
 

Author Comment

by:celeraadmin
ID: 40395289
FYI, I got the CRM server repair to sun successfully however that did not help. . . Here is a screenshot of the certificate from Firefox
Capture.PNG
0
 
LVL 29

Expert Comment

by:feridun
ID: 40395376
Well I guess the certificate is ok. Please check if an internet-facing deployment is configured. You can check this in CRM deployment manager on the server. If it is there may be an issue with ADFS.
0
 

Author Comment

by:celeraadmin
ID: 40395468
Yes there is an internet facing deployment configured. Any idea on troubleshooting ADFS, it is ver 2.0
0
 

Author Comment

by:celeraadmin
ID: 40395560
Even when I browse https://localhost:444/ i get the password prompt that does not accept my password.
0
 
LVL 29

Accepted Solution

by:
feridun earned 500 total points
ID: 40396805
Troubleshooting ADFS can be tricky. ADFS also uses SSL certificates but it uses its own certificates which are automatically renewed but there can be a problem.  I wonder if you have the problem described in this link http://support.microsoft.com/kb/2686840 - this is something I have also experienced.
0
 

Author Comment

by:celeraadmin
ID: 40397735
Feridun,

I finally resolved this issue. The issues was between the update messing up my stored procedures and the ADFS issue you described above so I will accept that as a solution. Thanks
0

Featured Post

Get up to 2TB FREE CLOUD per backup license!

An exclusive Black Friday offer just for Expert Exchange audience! Buy any of our top-rated backup solutions & get up to 2TB free cloud per system! Perform local & cloud backup in the same step, and restore instantly—anytime, anywhere. Grab this deal now before it disappears!

Join & Write a Comment

Introduction SQL Server Integration Services can read XML files, that’s known by every BI developer.  (If you didn’t, don’t worry, I’m aiming this article at newcomers as well.) But how far can you go?  When does the XML Source component become …
Ever wondered why sometimes your SQL Server is slow or unresponsive with connections spiking up but by the time you go in, all is well? The following article will show you how to install and configure a SQL job that will send you email alerts includ…
Using examples as well as descriptions, and references to Books Online, show the documentation available for date manipulation functions and by using a select few of these functions, show how date based data can be manipulated with these functions.
This video shows how to set up a shell script to accept a positional parameter when called, pass that to a SQL script, accept the output from the statement back and then manipulate it in the Shell.

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now