
Hi,
We have 4 servers for CRM app. CRM backend server roles have been installed on both B.E servers. Installation of Front End and Deployment role has been completed on one of the Front End servers. While running the setup on the second Front End Server, I am getting this alert in the System Check Stage of the Setup:
For a deployment that is more secure, the Microsoft Dynamics CRM VSS Writer Service should be run under a least-privileged domain user account that is not shared by other Microsoft Dynamics CRM services on this computer.
I checked the setup again and verified that the service account is right for the CRM VSS Writer Service. I need to know whether it is due the fact that we have already installed Front End Server role on one of the servers before.
Is it something to worry about or we can proceed. Need suggestions.
Thanks,
Fahad Ali Shaikh
*This post is locked for comments
I have the same question (0)By default, these are the minimal permissions that are required by the VSS Writer Service:
- Domain Users membership.
- That account must be granted the Logon as service permission in the Local Security Policy.
- Read permission to the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSCRM
- PrivUserGroup and SQLAccessGroup membership. By default, these groups are created and appropriate membership is granted during Microsoft Dynamics CRM Server Setup.
I have seen that error even with just this minimal configuration. Although, I have not seen this documented, but I think this can be ignored if you have set the proper permissions for that account.
Hope this helps.