Unable to change logon name, the 2147187707 error

(0) Share

Report

Posted on by Community Member

Hi,

I've a problem with my CRM. When I try to create a Contact or an Incident for example, a popup show me the following message :

Unable to change logon name : you do not have the neccessary permissions to change the domain logon name for this user.

I've found some issue on the WEB like change the register key AutoGroupManagementoff to 1. Restart the sandbox service, register step in pluginRestrationTool with other user context. But nothing work

When i see log file, I know it's due to a plugin. When I unregsiter my plugns, all work fine.

Have you some issues for me ?

Thanks,

*This post is locked for comments

I have the same question (0)

All responses (3)

Answers (0)

Suggested answer

Magor Kovacs 1,835 on at

Like (0)

Report

Hello Jean,

Thanks for the post. From the description I understand that the issue only happens if the plugin is registered. I'd like to get some more info on this plugin:

- Does it run asynchronously?

If the plugin is asynchronous, add “Microsoft Dynamics CRM Asynchronous Processing Service” logon account to “Local Administrators Group“, restart service.

- Does it run synchronously?

If the plugin is synchronous, add “CRMAppPool” Identity account to “Local Administrators Group“, restart IIS.

Please also see the following blog post for an exhausting description and list of fixes for the issue:

astutecrm.wordpress.com/.../crm-2011-unable-to-change-domain-logon-name-access-denied-error

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Hi,

thanks for your quick answer :)

I've already found this blog and apply those tips. I've also found this blog :

zhongchenzhou.wordpress.com/.../dynamics-crm-2011-plugin-error-you-do-not-have-the-necessary-permission-to-change-the-domain-logon-name-for-this-user-access-is-denied-system-unauthorizedaccessexception

So, I've already add CRMAppPool to local Administrator Group (plugin is synchronous).

Was this reply helpful? Yes No
Brad Sprigg 985 on at

Like (0)

Report

Hi there

I thought I should add that I recently had this issue as well, when enabling tracing I discovered this error message.

"(IIS App Pool user) is not in PrivUserGroup"

Additional to adding that user to the Local Admin group, I added it to the PrivUserGroup group in AD and the problem was resolved.

Was this reply helpful? Yes No