45
I'm trying to create an Exchange Online Hybrid email server profile for the configuration of server-side synchronization for CRM on-premise to Exchange Online.
The credentials area where I would fill in the "Authentication Using Impersonation" is missing. This screenshot shows what I'm referring to:
Any ideas?
I've tried to change permission for this app pool to Deny. It was painfull. Whole CRM stopped work with ACS error. When i changed permission to allow, CRM instantly start to work, but ACS error appeared again in exchange profile test. After some IISreset's and Sync services resets it started to work again... so if it work, better do not touch it :) Our certificate need to be renewed every year, so probalbly this will happen again in next few months. We are using it only for test for our clients so it's not critical service.
Check also on which account your crm app pool runs in IIS and give this account read permission to certificate.
(I don't know if this is neccesary, but when it started to work without ACS error i left it as it is) I also added account "IIS Apppool\DefaultAppPool" (change Default AppPool to name of your app pool). You need to change location to your server instead of domain name.
If asynchronous sync (maintenance) service runs on other account than asynchronous sync, then add permission also to this account.
You can also try to give full control on certificate for those accounts.
One more thing that we faced many times on many servers is... i don't know why, but when we added those permissions to certificate, they were not visible after logoff/logon and we need to add it one more time, so you can check this to. If it still don't work, restart server and check if those permissions are there.
We didn't try with private certificate. We used SSL for our domain.
Anyway, ACS error means something wrong with permission to certificate. I spent many hours yesterday to run it, but it's possible
Good luck!
Hi GrzegorzIS
We have followed all the steps in the link you suggest, besides editing the ConfigureCrmServerSideSync.ps1. It should be noted that we have CRM 2016 local V.8.2(2.1.176).
However when we run the server profile test in CRM we keep getting this error:
*********************
365 message::
*********************
Error acquiring ACS token. Check if your tenantId has been specified correctly in the email server profile, and make sure that Exchange and CRM are in the same tenant
*****************************
Request to Exchange::
*****************************
<Trace Tag="EwsRequestHttpHeaders" Tid="33" Time="2023-01-19 17:08:13Z">
POST / HTTP/1.1
Content-Type: text/xml; charset=utf-8
Accept: text/xml
User-Agent: ExchangeServicesClient/15.00.1076.004
Accept-Encoding: gzip,deflate
previously assigned read permissions to the user of the asynchronous synchronization service on the certificate.
The following question arises. Do we have to have a SSL Payment Certificate?
We welcome any suggestions you may have.
Hello,
You can't connect to Exchange through EWS because Microsoft disabled this function (yesterday in my tenant).
If you have CRM 365 (8.2), then you can use guide from this link:
global.hitachi-solutions.com/.../
We just did it using this instruction.
We had to edit ConfigureCrmServerSideSync.ps1, you can try it if it won't work.
You have to replace lines 115 and 116:
$msolcred = Get-Credential $o365AdminEmail -Message "Enter the credentials for your organization's Office 365 subscription"
Connect-Msolservice -credential $msolcred
with this:
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
Connect-MsolService
It enables Tls12 for this Powershell session and login to o365 with modern authentication.
If everything will be all right, then result will be:
After configuration of certificate you need to add permision to certificate private key for service account that run your Asynchronous Processing Service and crm app pool
Hi Angel, I have the same configuration as you but the mailboxes are returning an error.
Error : System.Net.WebException: Error de la solicitud con el código de estado HTTP 401: .
en System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
en System.Web.Services.Protocols.SoapHttpClientProtocol.EndInvoke(IAsyncResult asyncResult)
en Microsoft.Crm.Asynchronous.EmailConnector.ExchangeServiceBinding.EndCreateItem(IAsyncResult asyncResult)
en Microsoft.Crm.Asynchronous.EmailConnector.ExchangeOutgoingEmailProvider.EndCreateItem()
What do you suggest I should check either in CRM and/or Exchange online?
I would really appreciate your help.
I opened a support case with Microsoft and found that the Email Server Profile (Hybrid) doesn't have a Credentials area by design. Not sure why this was a thing with others, but we're using Dynamics 365 CRM 2016 on-premises with Exchange Online and it's not required.
After figuring out some other items that needed to be done, we got it working successfully. Hope this helps someone else, thanks
I tried the option of enabling via MSCRM_CONFIG database as the article described and it still doesn't show up when I attempt to create an Email Server Profile using Hybrid option.
I also tried logging into CRM using both http and https and it doesn't make a difference. Any other ideas I could try?
I actually have this article already, but haven't tried it because there were multiple ways to enable SSL to allow the ability to use the credentials field and using the other method is why I didn't think I needed to try this one. I enabled SSL successfully using this article:
mahenderpal.wordpress.com/.../
I figured these were two separate issues because in my case, the credentials area doesn't even show at all, but if you feel it's still related and could work I'm willing to try it...your thoughts?
Out of curiosity, I decided to try using Exchange Online instead of Exchange Online Hybrid as my choice when creating a server profile and credentials section shows up just fine on this one:
#1
Daivat Vartak (v-9d...
225
Super User 2025 Season 1
#2
Vahid Ghafarpour
78
Super User 2025 Season 1
#3
Muhammad Shahzad Sh...
72
Share
Report
All responses (
Answers (
