AD user groups

(0) Share

Report

Posted on by Community Member

Hi all!

We are trying to implement the Dynamics NAV 2017 in our university for studying and we have to add our students to Dynamics NAV as users. We have a lot students coming and going, so, the users always change and the number of users is large. We cannot add everyone to the program.

We have an Active Directory group and we added this AD-group to Dynamics NAV as a new user ("Windows User Name" field) with License Type as “Windows Group”. We assigned to this new user the permission sets (SUPER).

Then, when the member of this AD-group tries to log on, he/she gets the following message: “You do not have access to Microsoft Dynamics NAV. Verify that you have been set up a valid user in Microsoft Dynamics NAV.” Should we do anything else to get it working?

Are there any solutions how to add an AD-group with a large number of users without creating an individual user for everyone in Dynamics NAV 2017?

Thanks in advance

*This post is locked for comments

I have the same question (0)

All responses (8)

Answers (0)

ManishS 86 on at

Like (0)

Report

Create a single user (i.e. Student in your AD), and then let the students login using Student login id the PCs.

Was this reply helpful? Yes No
Tina Menezes 2,582 on at

Like (0)

Report

Hi,

You can refer to this blog by Saurav Dhyani. There are certain steps that need to be performed using Windows PowerShell to resolve this error.

saurav-nav.blogspot.in/.../add-user-to-microsoft-dynamics-nav-2016.html

Was this reply helpful? Yes No
mmv 11,471 on at

Like (0)

Report

You may use the powershell script to create a single user and use the same id to login by all the students.

Was this reply helpful? Yes No
Suggested answer

Maneesha 5,891 on at

Like (0)

Report

MayaSA ,

this is simple

you have several solutions to fulfill your requirement,

1. If you are willing to do this on studying purposes you better to make the user login as "Microsoft Dynamics NAV User Name / Password Authentication type' , not the AD group

it will make you to easy handling of the user and also no need of connect with windows AD.

2. if your students coming on batch wise , you can create several dummy IDs (user name/passwords) and ask them to login through those common user IDs , then you can continue those to next batch also , no need of creating user ID to every users on board

-----

on your error

this error may occur your user card dosen't have that kind of users been created or your Windows AD not properly sync

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Thank you all for your replies!

Tina, if I understood right, your link guides how to create a new user and how to assign a permission set, but we have already created a user for Windows authentication as the AD-group by using Dynamics NAV Windows client (Department > Administration > IT Administration > General > Users> New > “Window Authefication” FastTab > “Window User Name” field). Are there any differences between user’s creating using PowerShell and creating using program interface? Unfortunately, I’m not an IT specialist and I need more explanations. The problem is, that we can’t get the access to the program as a member of the AD-group.

Mahesh, could you give some more details, please? How can we link a created new user with the AD-group to give the access for all AD-group’s members with their own Windows credentials.

I have read that with Windows credential type, “users are authenticated using their Windows credentials. You can only specify Windows as the credential type if the corresponding user exists in Windows (Active Directory, local workgroup, or the local computer’s users).” https://msdn.microsoft.com/en-us/library/hh169371(v=nav.90).aspx How can we use this?

Maneesha De Silva, thank you, but we are interested in using windows credential to access to program in this time.

Was this reply helpful? Yes No
Community Member on at

Like (1)

Report

Tina, thank you for reply.

If I understood right, your link guides how to create a new user and how to assign a permission set, but we have already created a user for Windows authentication as the AD-group by using Dynamics NAV Windows client (Department > Administration > IT Administration > General > Users> New > “Window Authefication” FastTab > “Window User Name” field).

Are there any differences between user’s creating using PowerShell and creating using program interface? Unfortunately, I’m not an IT specialist and I need more explanations. The problem is, that we can’t get the access to the program as a member of the AD-group.

Was this reply helpful? Yes No
mmv 11,471 on at

Like (0)

Report

If you have already created the user in the AD, you can use that user name while creating the Windows User either via "Administration > IT Administration > General > Users> New >

or using powershell.

The reason why I mentioned powershell is, initially, as per your query, I thought no user is been created and you are unable to access NAV.

If you are able to access NAV, the simplest method for you to create User is via "Administration > IT Administration > General > Users> New >".

Was this reply helpful? Yes No
Tina Menezes 2,582 on at

Like (0)

Report

Hi,

No there is no difference in creating user through program interface or through powershell. You can use one of the two methods. Powershell is an alternative to creating through program interface as given in the below link:

https://msdn.microsoft.com/en-us/library/hh169371(v=nav.90).aspx

But the reason why I suggested it to you is, I had previously faced the same error after creating new user through program interface. But then after following the powershell steps as mentioned in the link I sent you previously my error was resolved. So you can try it too and check.

Was this reply helpful? Yes No