Cannot Add User from Domain

This question is answered

Hi,

First time I have had my hands on this so really do not know much....

I am having the same issues as in this post: http://community.dynamics.com/product/gp/f/32/p/69842/127670.aspx?ref=rc-a

I can confirm that the domain user account is the same for the service and the app pool. Some people that have been here for a while have shown me a screenshot of the actual doamin name listed so we know that this worked at some stage.

What we cannot do is select out domain and the users from within, but we are able to add them manullay by typing in their details. You can see below that we only have the option for 'local' which then displays the groups from the local machine.

Hoping someone can shed some light on this for me.

Cheers

Verified Answer
  • Hi Jarrod,

    I did some research and found that this problem most often occurs because the account running the Identity COM+ Application for Business Portal no longer has permissions to query the domain for groups or users. This typically occurs because a domain policy is in place that restricts that user account from doing so.

    In a previous case, this was corrected by going to the BusinessFramework.config file and changing the following line to TRUE:

    <useAlternativeDomainLookup type="Boolean" value="False" />

    Give this a try and let us know your results.

    Thanks,

    Adam Leonard

    Technical Support Engineer

    **This posting is provided "AS IS" with no warranties and confers no rights.

All Replies
  • Hi Jarrod,

    I did some research and found that this problem most often occurs because the account running the Identity COM+ Application for Business Portal no longer has permissions to query the domain for groups or users. This typically occurs because a domain policy is in place that restricts that user account from doing so.

    In a previous case, this was corrected by going to the BusinessFramework.config file and changing the following line to TRUE:

    <useAlternativeDomainLookup type="Boolean" value="False" />

    Give this a try and let us know your results.

    Thanks,

    Adam Leonard

    Technical Support Engineer

    **This posting is provided "AS IS" with no warranties and confers no rights.

  • Hi Adam,

    Thanks for the response and I apologise for my late reply as I have been traveling.

    I cannot find this file on either the SL server, the web server that hosts the interface nor the database server. Are you able to provide some further information as to where I should find this?

    Another suggestion has been to change the COM object o use a network account but I do not think that this will resolve anything as this has changed 'automagically' at some stage.

    Thank,

    Jarrod

  • We do not know why, but this started working about 6 weeks ago so I have marked the above answer as correct as it may help someone else out there with the same issues.