web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

Community site session details

Community site session details

Session Id :
Customer experience | Sales, Customer Insights,...
Suggested Answer

Only the Deployment Administrators are able to use Deployment Manager. You are not a Deployment Administrator.

(0) ShareShare
ReportReport
Posted on by 5

My domain\user who used to be a deployment manager was deleted. Its on premises version 2016 for Microsoft Dynamics® CRM

I have created the same domain\user but cannot open the Dep. Manager can anyone guide me the steps to assign the new user to any group or what are the steps in order to open Deployment manager.

Getting an error while running a report from CRM.Error Details: Error occurred while fetching the list of data extensions installed on the report server.

I have the same question (0)
  • Suggested answer
    mbashir83 Profile Picture
    20 on at

    The problem you are running into is that each domain account has a unique SID.  When you deleted the original domain account, the SID associated with it also went away.  You are now in a position where your only option to fix is to either backup your CRM environment, re-install the entire system, and map that user account to the new account, or you can take the non-Microsoft supported method of a direct SQL update to your database.  There is some sample queries below, please know that these are for reference only and I cannot be held responsible if you choose to run these queries/updates and cause further issues.  It is recommended that you utilize a DBA for review as well.  In addition, if the new domain account was added as a user in CRM, then you will have a few different hoops that you will also have to navigate as that new account would have created additional records in these tables that cannot be duplicated.

    To start, you will need to get the SID for the newly created domain\user account.  The following works great through PowerShell

    Get-ADUser -Identity newusername -Properties * | Format-Table Name, SID

    Once you have the SID, you are able to continue through with the SQL end

    DECLARE @loginname varchar(50) = 'domain\user'
    DECLARE @sid varchar(50) = 'insert SID retrieved in PowerShell'
    DECLARE @UserId uniqueidentifier;
    	SELECT @UserId = Id
    	FROM MSCRM_CONFIG.dbo.SystemUser
    	WHERE Name = @loginname
    
    SELECT su.Id, su.IsDisabled, su.Name, su.IsDeleted, sua.AuthInfo, sua.UserId, sua.IsDeleted
    FROM MSCRM_CONFIG.dbo.SystemUser su LEFT OUTER JOIN
    MSCRM_CONFIG.dbo.SystemUserAuthentication sua ON su.Id = sua.UserId
    WHERE su.Name = @loginname
    
    SELECT @UserId
    SELECT @suaId

    From the results, if the SID that you retrieved from PowerShell does not match what is showing in the results, the next step would be to update the SID to equal the correct value.  Test code is below.

    BEGIN TRAN
    UPDATE MSCRM_CONFIG.dbo.SystemUser
    SET IsDisabled = NULL, IsDeleted = 0
    WHERE Name = @loginname
    GO
    UPDATE MSCRM_CONFIG.dbo.SystemUserAuthentication
    SET AuthInfo = 'W:'   @sid, IsDeleted = 0
    WHERE ID = @suaId
    ROLLBACK

  • Tanzeel Profile Picture
    5 on at

    Please advise if I can run the below query on my production server, as i was able to get the UID for the lost user.

    BEGIN TRAN
    UPDATE MSCRM_CONFIG.dbo.SystemUser
    SET IsDisabled = NULL, IsDeleted = 0
    WHERE Name = @loginname
    GO
    UPDATE MSCRM_CONFIG.dbo.SystemUserAuthentication
    SET AuthInfo = 'W:' + @sid, IsDeleted = 0
    WHERE ID = @suaId
    ROLLBACK

  • Suggested answer
    mbashir83 Profile Picture
    20 on at

    My apologies, I missed a section of the first part of the SQL statement.  Please be aware that any updates you are making are at your own risk and I take no liability for anything that may occur to your system.  If you are able to run the first section of code without errors, then continuing to the transactional statement is up to you.  The first portion is a query only so no changes are made.  Please review the following updated statements:

    DECLARE @loginname varchar(50) = 'domain\user'
    DECLARE @sid varchar(50) = 'insert SID retrieved in PowerShell'
    DECLARE @UserId uniqueidentifier;
    	SELECT @UserId = Id
    	FROM MSCRM_CONFIG.dbo.SystemUser
    	WHERE Name = @loginname
    DECLARE @suaID uniqueidentifier;
    	SELECT @suaID = Id
    	FROM MSCRM_CONFIG.dbo.SystemUserAuthentication
    	Where UserId = @UserId and AuthInfo like 'W:%'
    
    SELECT su.Id, su.IsDisabled, su.Name, su.IsDeleted, sua.AuthInfo, sua.UserId, sua.IsDeleted
    FROM MSCRM_CONFIG.dbo.SystemUser su LEFT OUTER JOIN
    MSCRM_CONFIG.dbo.SystemUserAuthentication sua ON su.Id = sua.UserId
    WHERE su.Name = @loginname
    
    SELECT @loginname [@loginname], @sid [@sid], @UserId [@UserId], @suaID [@suaId]
    

    This query should give you two separate results, the first is the joining of the MSCRM_Config SystemUser & SystemUserAuthentication tables.  The second is to confirm that the declared variables are the ones needed - the correct domain\loginname, correct SID, the UserId (same between both tables), and the unique ID for the SystemUserAuthentication table for the record that contains the SID.  You should compare the sua.AuthInfo value against the @sid value.  Ignoring the W:, if the values do not match, this is why you cannot log into the Deployment Manager with the new account.  The next steps are completely at your own risk, no liability or expectations on my end.

    BEGIN TRAN
    UPDATE MSCRM_CONFIG.dbo.SystemUser
    SET IsDisabled = NULL, IsDeleted = 0
    WHERE Name = @loginname
    GO
    UPDATE MSCRM_CONFIG.dbo.SystemUserAuthentication
    SET AuthInfo = 'W:'   @sid, IsDeleted = 0
    WHERE ID = @suaId
    ROLLBACK

    As long as all variables are added correctly, the transactional statement is committed, and you were able to confirm everything from the first statement, this should allow you to access the deployment manager as the user and add in a second deployment administrator.  I cannot advise if you should or should not do these steps - if you are concerned, please engage a DBA through your organization to confirm the information prior to executing.  As always, it is HIGHLY ENCOURAGED that you back up the organizational CRM database (ORGNAME_MSCRM) as well as the MSCRM_CONFIG database PRIOR to making any changes/updates.

    If the above resolves your issue, please do mark this as the verified answer

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Leaderboard > Customer experience | Sales, Customer Insights, CRM

#1
Tom_Gioielli Profile Picture

Tom_Gioielli 170 Super User 2025 Season 2

#2
#ManoVerse Profile Picture

#ManoVerse 61

#3
Gerardo Rentería García Profile Picture

Gerardo Rentería Ga... 52 Most Valuable Professional

Last 30 days Overall leaderboard

Product updates

Dynamics 365 release plans