Dynamics CRM 2011 plugin error: “You do not have the necessary permission to change the domain logon name for this user” Access is denied. System.UnauthorizedAccessException

You might come across this error within plugin “You do not have the necessary permission to change the domain logon name for this user” Access is denied.

The system job details might looks like this

If the plugin is synchronous, add “CRMAppPool” Identity account to “Local Administrators Group“, restart IIS.

If the plugin is asynchronous, add “Microsoft Dynamics CRM Asynchronous Processing Service” logon account to “Local Administrators Group“, restart service.

This might also happen when you use user account to run “CRMAppPool” and “Microsoft Dynamics CRM Asynchronous Processing Service” and the password is changed, in that case check the if the password is correct and update the password if necessary.