web
You’re offline. This is a read only version of the page.
close
Skip to main content

Announcements

Introducing our New Video Series: Community Spotlight
News and Announcements icon
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Microsoft Dynamics CRM (Archived) / You do not have the ne...
Microsoft Dynamics CRM (Archived)

You do not have the necessary permissions to change the domain logon name for this user

(0) ShareShare
ReportReport
Posted on by Alaa Ramadan 4,130
I am getting the following error when I attempt to add/update new record with some entities (Account/Contact/Opportunity) "You do not have the necessary permissions to change the domain logon name for this user" Any help please - thank you,

*This post is locked for comments

I have the same question (0)
  • Omneya Iskander Profile Picture
    Omneya Iskander 410 on at

    Hi Alaa,

    1- which ver. of CRM you're working with?

    2-Make sure you have necessary privilege over the CRM.

    3- if your account is just a user and not system admin on CRM, then make sure that you have record or business unit or entity access privilege for the business unit/records you're trying to change. you may ask the system admin about your security role

    4-  verify you access the domain controller, and you're logged on with your domain credentials.

    hope this may help

  • Alaa Ramadan Profile Picture
    Alaa Ramadan 4,130 on at

    Thank you Omneya, In fact this is a test environment that I set it up from scratch to upgrade CRM 4.0 to 2011, at some point it was working fine, not sure what change I made and may causes that error:

    - I'm domain administrator

    - I'm  also System admin on CRM

    This is the error message from the log:

    Unhandled Exception: System.ServiceModel.FaultException`1[[Microsoft.Xrm.Sdk.OrganizationServiceFault, Microsoft.Xrm.Sdk, Version=5.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35]]: Access Denied. Reference number for administrators or support: #3D3595F9Detail:

    <OrganizationServiceFault xmlns:i="www.w3.org/.../XMLSchema-instance" xmlns="schemas.microsoft.com/.../Contracts">

     <ErrorCode>-2147187707</ErrorCode>

     <ErrorDetails xmlns:d2p1="schemas.datacontract.org/.../System.Collections.Generic" />

     <Message>Access Denied. Reference number for administrators or support: #3D3595F9</Message>

     <Timestamp>2014-03-09T18:18:52.816649Z</Timestamp>

     <InnerFault i:nil="true" />

     <TraceText>

    [Microsoft.Dynamics.Integration.Adapters.Crm2011.Plugin: Microsoft.Dynamics.Integration.Adapters.Crm2011.Plugin.AccountCreateUpdateEventHandler]

    [208c9461-bfe9-df11-9ec8-00155d52bcec: Update of account]

    </TraceText>

    </OrganizationServiceFault>

  • Alaa Ramadan Profile Picture
    Alaa Ramadan 4,130 on at

    I believe I figured out what went wrong, mistakenly I changed the CRMAppPool account to use a domain account which is also a CRM user.

    Once I changed this back to use the network authority, the error is not popping up any more

    Thanks again!

  • Verified answer
    Omneya Iskander Profile Picture
    Omneya Iskander 410 on at

    Hi Alaa,

    you're welcome, and thanks for letting me the progress.

    however, if you're planning to migrate for CRM2011 then to 2013, you may need to consider having a separate OU for CRM services users.

    the best practice in this case is to create separate user for each service as follows:

    i.Application service add to performance log group (CRMPool)

    ii.Deployment web service- Administrators group, and add it to SQL server sysadmin (CRMDeploy)

    iii.Sandbox processing services (CRMSandbox)

    iv.VSS writer services (CRMVSS)

    v.Asynchronous processing services  add to performance log group (CRMAsync)

    vi.Monitoring services (CRMmonitor)

    make sure that you grant the correct permission for each user (you will need to grant some permissions through Local security policy --- adding to performance group log)

    the OU that contains service users should NOT be the same OU for normal CRM users.

    Good luck.

    and have a good day

    Omneya

    Note: if you think that this may be the solution, kindly mark the answer as a solution.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

News and Announcements

Introducing our New Video Series: Community Spotlight

Quick Links

Season of Sharing Community Challenge Launch!

Jump in, show your community spirit, and win prizes!

Women in Power Builds Momentum

Expanding mentorship, skilling, and AI innovation

Congratulations to the May Top 10 Community Leaders

These are the community rock stars!

Leaderboard > 🔒一 Microsoft Dynamics CRM (Archived)

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans