web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

News and Announcements icon
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Microsoft Dynamics CRM (Archived) / You do not have the ne...
Microsoft Dynamics CRM (Archived)

You do not have the necessary permissions to change the domain logon name for this user

(0) ShareShare
ReportReport
Posted on by Alaa Ramadan 4,130
I am getting the following error when I attempt to add/update new record with some entities (Account/Contact/Opportunity) "You do not have the necessary permissions to change the domain logon name for this user" Any help please - thank you,

*This post is locked for comments

I have the same question (0)
  • Omneya Iskander Profile Picture
    Omneya Iskander 410 on at

    Hi Alaa,

    1- which ver. of CRM you're working with?

    2-Make sure you have necessary privilege over the CRM.

    3- if your account is just a user and not system admin on CRM, then make sure that you have record or business unit or entity access privilege for the business unit/records you're trying to change. you may ask the system admin about your security role

    4-  verify you access the domain controller, and you're logged on with your domain credentials.

    hope this may help

  • Alaa Ramadan Profile Picture
    Alaa Ramadan 4,130 on at

    Thank you Omneya, In fact this is a test environment that I set it up from scratch to upgrade CRM 4.0 to 2011, at some point it was working fine, not sure what change I made and may causes that error:

    - I'm domain administrator

    - I'm  also System admin on CRM

    This is the error message from the log:

    Unhandled Exception: System.ServiceModel.FaultException`1[[Microsoft.Xrm.Sdk.OrganizationServiceFault, Microsoft.Xrm.Sdk, Version=5.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35]]: Access Denied. Reference number for administrators or support: #3D3595F9Detail:

    <OrganizationServiceFault xmlns:i="www.w3.org/.../XMLSchema-instance" xmlns="schemas.microsoft.com/.../Contracts">

     <ErrorCode>-2147187707</ErrorCode>

     <ErrorDetails xmlns:d2p1="schemas.datacontract.org/.../System.Collections.Generic" />

     <Message>Access Denied. Reference number for administrators or support: #3D3595F9</Message>

     <Timestamp>2014-03-09T18:18:52.816649Z</Timestamp>

     <InnerFault i:nil="true" />

     <TraceText>

    [Microsoft.Dynamics.Integration.Adapters.Crm2011.Plugin: Microsoft.Dynamics.Integration.Adapters.Crm2011.Plugin.AccountCreateUpdateEventHandler]

    [208c9461-bfe9-df11-9ec8-00155d52bcec: Update of account]

    </TraceText>

    </OrganizationServiceFault>

  • Alaa Ramadan Profile Picture
    Alaa Ramadan 4,130 on at

    I believe I figured out what went wrong, mistakenly I changed the CRMAppPool account to use a domain account which is also a CRM user.

    Once I changed this back to use the network authority, the error is not popping up any more

    Thanks again!

  • Verified answer
    Omneya Iskander Profile Picture
    Omneya Iskander 410 on at

    Hi Alaa,

    you're welcome, and thanks for letting me the progress.

    however, if you're planning to migrate for CRM2011 then to 2013, you may need to consider having a separate OU for CRM services users.

    the best practice in this case is to create separate user for each service as follows:

    i.Application service add to performance log group (CRMPool)

    ii.Deployment web service- Administrators group, and add it to SQL server sysadmin (CRMDeploy)

    iii.Sandbox processing services (CRMSandbox)

    iv.VSS writer services (CRMVSS)

    v.Asynchronous processing services  add to performance log group (CRMAsync)

    vi.Monitoring services (CRMmonitor)

    make sure that you grant the correct permission for each user (you will need to grant some permissions through Local security policy --- adding to performance group log)

    the OU that contains service users should NOT be the same OU for normal CRM users.

    Good luck.

    and have a good day

    Omneya

    Note: if you think that this may be the solution, kindly mark the answer as a solution.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Congratulations to the November Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > 🔒一 Microsoft Dynamics CRM (Archived)

#1
SA-08121319-0 Profile Picture

SA-08121319-0 4

#1
Calum MacFarlane Profile Picture

Calum MacFarlane 4

#3
Alex Fun Wei Jie Profile Picture

Alex Fun Wei Jie 2

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans