CRM Install Admin User Deleted from Active Directory
Posted Friday, May 15th, 2009
Problem:
The installing admin user for Dynamics CRM 4.0 was deleted from Active Directory. The Installing admin user still exists in CRM, but the user cannot access CRM.
Example:
- Active Directory user = crmadmin
- CRM admin user = crmadmin
- The network administrator deletes the crmadmin Active Directory user account, which is the account under which CRM was installed. At this point, CRM is no longer accessible by the crmadmin account.
- After realizing that the crmadmin Active Directory account should not have been deleted, the network administrator adds the crmadmin user back into Active Directory.
- After this is complete, the user tries to log into CRM as the crmadmin user. This fails.
The reason for this is that when an account is created in Active Directory, a unique system identifier (much like a GUID) is created each time and is attached to that user account. This identifier is stored with the CRM user record that is inserted in the CRM database. Since the crmadmin Active Directory account was recreated and a new identifier was created, the identifier that was stored with the CRM user record no longer matches.
Potential Solution (as recommended by Microsoft):
Here are a few steps to potentially resolve the issue and associate the CRM Admin user in CRM to a new User in Active Directory (AD):
- Create a test user in AD in the Domain that CRM resides. ( i.e. username: dummytestuser)
- Create the new CRM Admin user in AD. This user must have the same Windows Login name as the deleted user because of the related Deployment Manager. (i.e. Old AD CRM username: crmadmin : New CRM username: crmadmin)
- In CRM go to Settings | Administration | Users.
- Find the old CRM Admin user and open it. In the Domain Login box put in the test username from step 1 (dummytestuser). Save & Close.
- Find the user in CRM created in the previous step (dummytestuser) and open it. In the Domain Login box put in the new CRM Admin username (crmadmin) from step 2. Save & Close.
- Test the access of the CRM Admin user by signing into CRM as the crmadmin user. Please check the history for this user to make sure that it all transferred correctly.
At this point you should have successfully associated the Installing Admin user with the new CRM Admin Active Directory account. These steps also apply to any other user that may have been put into CRM and then were deleted from Active Directory.
Tags: Active Directory Issue, Cannot Access CRM, Installing User Can't Access CRM
Posted in Active Directory, Dynamics CRM
Not yet using Dynamics CRM? I.B.I.S., Inc. gives you the Dynamics CRM options you want, and the business results you need.
Learn more about our Dynamics CRM solutions
