No users can log into Microsoft Dynamics CRM 2011 (on premise)
Hello experts,
One of our clients has an urgent situation, they are not able to log into Microsoft Dynamics CRM. Everything worked fine yesterday. They log in through IE and are prompted for a password. When they enter their password it is rejected (No error message). It seems somehow they have all lost permission to log in. Where do I check / set their permissions?
One of our clients has an urgent situation, they are not able to log into Microsoft Dynamics CRM. Everything worked fine yesterday. They log in through IE and are prompted for a password. When they enter their password it is rejected (No error message). It seems somehow they have all lost permission to log in. Where do I check / set their permissions?
ASKER
The users log in via IE with an internal URL. There is one user that logs in via an external URL. Neither of these are working. I have confirmed the site is added to trusted zone. Still rejects the password. They have SBS2011 and Server 2008 R2. The Server 2008 R2 hosts the SQL and IIS for CRM. When I try authenticate locally from the server I get the same problem. Will post screenshot.
Capture.PNG
Capture.PNG
I see you are using https for the URL. Is it possible that the SSL certificate for the CRM web site has expired?
I recently had this issue with someone that was using an Internet-facing deployment with ADFS and no-one could log in when the SSL certificate expired. But the expiry problem would apply even if you are not using an IFD.
I recently had this issue with someone that was using an Internet-facing deployment with ADFS and no-one could log in when the SSL certificate expired. But the expiry problem would apply even if you are not using an IFD.
ASKER
I guess that is possible, this is a client that I took over so I am still getting a handle on the CRM setup. Where would I check for the expired cert?
In IIS, on the Windows server where the CRM web site is installed (where the CRM server software is installed).
ASKER
Looks like the certificate is still valid. I get this error from a client machine when I cancel out the password prompt:
HTTP Error 401 - Unauthorized: Access is denied
<html><body><p>
An error has occurred.
<br/><br/>
Try this action again. If the problem continues, check the Microsoft Dynamics CRM Community for solutions or contact your organization's Microsoft Dynamics CRM Administrator. Finally, you can contact Microsoft Support.
</p></body></html>
HTTP Error 401 - Unauthorized: Access is denied
<html><body><p>
An error has occurred.
<br/><br/>
Try this action again. If the problem continues, check the Microsoft Dynamics CRM Community for solutions or contact your organization's Microsoft Dynamics CRM Administrator. Finally, you can contact Microsoft Support.
</p></body></html>
ASKER
Definitely looks like some permission issue on the server side. When I try run a repair on the CRM server I get the attached error. Any idea on what permissions to add where?
Capture.PNG
Capture.PNG
The logged on user needs to be a member of the Administrator group on the computer where SQL Server is installed and be a member of the sysadmin role in SQL Server.
Since SBS probably self sign certs and they've expired? Check certs on IIS may need to run the connection wizard again to renew the SBS certs.
ASKER
Where exactly in IIS do I check the certs and how do i run connection wizard?, when I checked the cert in IE it said it expires in 2016.
ASKER
FYI, I got the CRM server repair to sun successfully however that did not help. . . Here is a screenshot of the certificate from Firefox
Capture.PNG
Capture.PNG
Well I guess the certificate is ok. Please check if an internet-facing deployment is configured. You can check this in CRM deployment manager on the server. If it is there may be an issue with ADFS.
ASKER
Yes there is an internet facing deployment configured. Any idea on troubleshooting ADFS, it is ver 2.0
ASKER
Even when I browse https://localhost:444/ i get the password prompt that does not accept my password.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Feridun,
I finally resolved this issue. The issues was between the update messing up my stored procedures and the ADFS issue you described above so I will accept that as a solution. Thanks
I finally resolved this issue. The issues was between the update messing up my stored procedures and the ADFS issue you described above so I will accept that as a solution. Thanks
Are you using an Internet-facing deployment?