For some of SQL 2008 security issues, I can't create GP 2010 users through the application.
Could anyone provide me with procedures to create the Dynamics GP SQL logins outside of the GP application ?
*This post is locked for comments
For some of SQL 2008 security issues, I can't create GP 2010 users through the application.
Could anyone provide me with procedures to create the Dynamics GP SQL logins outside of the GP application ?
*This post is locked for comments
I assume that this will never work, the complexity of the encryption introduced in GP 10.0 prevents such an operation from being doable.
However, I assume as long as you are using "sa" account to create users from inside the application and "sa" is still holds the sysadmin role in SQL then you shouldn't have issues.
It might be an issue with the specific user you are trying to add that it already has an orphant record at the SQL level, try with different names it might work.
Can you trying logging into SSMS as DYNSA, change the password to something that meets your security policy and then try logging into GP as DYNSA using that new password? Now it sounds like you have a password encryption issue.
Yes I can Log into SSMS by DYNSA account, but when I run GP and use this account ID & Password, this login failed and I receive the message "Attempt to log in again or contact your system administrator".
I made a user by Web IP then I added to DYNAMICS.SY01400 table but I can't insert the same Password like SQL login in Password field as it is Binary data, and when I log into GP by "sa" account I can see this user but I couldn't change his Password, when I tried that, I receive the message of "The password change failed for an unknown reason. Enter a different password or contact your system administrator".
I think if I find a way to insert User Password in DYNAMICS.SY01400 table that simulate to GP password insertion, the problem will be solved!!
Can you log into SSMS as DYNSA or is it just the ODBC connection that fails? Have you tried running a SQL trace while attempting a login? The GP User Master is DYNAMICS.SY01400. The password field is binary and encrypted Would it be possible to set users up using GP and then impersonate the user you created in your Web IP? Sounds to me that there are registry entries that have been altered to control access to SQL via ODBC or they have removed the ability of 'sa' to create user accounts inside SQL. If they have done that, who know what other restrictions there are on the 'sa' account. You will still need to use GP security to grant access to your companies so if you can get valid users into GP, it would be best to do the rest in GP, otherwise you are circumventing all the security code in GP. I would imagine it would be quite the task to reinvent that wheel. Since you do not add users all that often, is it possible to grant that ability back to 'sa', add the users and access for those users to companies, and then switch 'sa' back to the way they want it to be?
Well Richared, SQL which I deal with is installed by a foreign company which restricts SQL logins creation... to create SQL logins I must use there IP web application for SQL which create logins and randomly give a password for our client employees only.
I tried to create users through GP application and I had received this error message "The creation of the login failed for unknown reason. Contact your SQL server administrator for assistance".
I asked them to shut IP off to try that again... but, i still have the same error.
So I thought that to create the logins in SQL and add them manually to GP tables!!
Let me know if this problem has any relevance to ODBC as I cannot login by DYNSA, also?
Thank you for supporting.
GP requires mixed mode authentication and the passsords will be encrypted. The user accounts can only be created within GP and you must be logged into GP as 'sa' to create new GP acocunts.
What are the security issues that require you to create logins outside of GP? I suppose you could create the accounts using GP and then adjust them in SQL afterwards. There are tables inside GP containing the user accounts that need to get populated as you add users.
Stay up to date on forum activity by subscribing. You can also customize your in-app and email Notification settings across all subscriptions.
André Arnaud de Cal... 291,280 Super User 2024 Season 2
Martin Dráb 230,214 Most Valuable Professional
nmaenpaa 101,156