CRM 2011 unable to change domain logon name “Access denied” Error
While many of us encounter this error at different occasions when working with Microsoft Dynamics CRM 2011 (On Premise). I’ve seen this error happening at the following situations,
-
When creating a new user (On Premise)
-
Your Workflow suddenly stops firing or sometimes status pending
-
During your plugin execution
I myself faced this issue when I was trying to create a new user. And here is a related forum thread where my solution helped the community
According to me, either of the below solutions worked in all the cases,
The “Workstation” service in your CRM server is not running or stopped.
-
To fix the same, click start –> Run – > type “services.msc” and check if your “Workstation” service is set to automatic and started.
Change Registry setting.
-
Make sure you have the "AutoGroupManagement" value set to 1 (false) in your registry (HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSCRM
Reason behind this registry change?
By default, the Auto Group Management functionality is turned on. Microsoft Dynamics CRM automatically adds the appropriate user accounts and the appropriate computer accounts to the required Microsoft Dynamics CRM security groups. If you turn off Auto Group Management, Microsoft Dynamics CRM does not automatically add these accounts. In this case, a domain administrator or a user who has sufficient permissions must add the appropriate user accounts and the appropriate computer accounts to the required groups.
Happy Troubleshooting!
Cheers,
Hey There. I found your weblog using msn. That is a really neatly written article. I will make sure to bookmark it and return to learn extra of your helpful info. Thank you for the post. I’ll certainly return.
Thanks Fiesta sotavento!
Thank you! Thank you! I have spent several hours today trying to figure out why this was happening for my plugin. (Note: this only started happening after I rebooted my CRM servers).
Two notes:
1) The registry key I changed on my system was “AutoGroupManagementOff” (note the “Off” at the end).
2) I had to restart the CRM services in order for the setting to go into effect.
John,
I’m glad it helped you!
Thanks.
Better yet:
-Open computer management console (right-click on computer -> manage), Server Manager, Configuration, Local Users and Groups, Groups and find CRM_WPG.
-Add the user running your CRM app pool here (network service by default).
-Reboot server.
This keeps CRM working as intended, by allowing it to keep the AD groups properly maintained. That’s a much better solution than hacking at the ragistry like an ape! All the “AutoGroupManagementOff” registry setting does is hide this particular error from you. It doesn’t actually “fix” anything.
I’m surprised that this is perpetuated as a “fix” on nearly every site/blog/forum. Doesn’t anyone out there actually try to understand what the problem is before solving it?
Enjoy!