Microsoft Dynamics CRM (Archived)

New User get 401 - Unauthorized: Access is denied

(0) Share

Report

Posted on by Community Member

Hi All,

I am using Dynamics CRM 2011 synchronized to AD instaled on windows server 2008 R2.

I have created a new user that was recognized as existent AD user through the creation by the CRM,

Configured some security roles,

But when the user tries to log in through the windows authentication dialog, he is prompted again and again, and after 3-4 times he gets the 401 error:

HTTP Error 401 - Unauthorized: Access is denied

If I try to log in with my user or any other they all work fine.

If I use IP address of the crm site + port, to log in to CRM with the problematic user its' working!!

Thank you in advance,

Uri

*This post is locked for comments

I have the same question (0)

All responses (4)

Answers (0)

Farhan Syed 1,156 on at

Like (0)

Report

Hi Uri,

Since you mentioned that the AD User is recognized in CRM and that you are able to login while specifying the IP + port, lets assume here that this user was not disabled in AD / CRM or duplicated.

Are you facing this with this only a specific user for a specific org?

If this not a multi-domain environment try specifying the server name in the host file (name: host)of the 'problematic users' machine and try logging while specifying the FQDN and port. (You need to have admin access to make changes to this file (open it in notepad) which you will find in the following location C:\Windows\System32\drivers\etc)

Lastly, did you try accessing this users credentials from a different machine or a different org

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Hi Farhan,

Thank you for your response,

As i wrote The problem is only with specific user, the only thing that distinguish that user from other users is that he was created today.

To access crm i use crm.companydomain.com or ip.ip.ip.ip:port - for this user only second option is working.

I have verified that the account wasn't locked in the AD, also didn't found any event log for this error in the event viewer.

I think that the problem is some how based on user authentication in CRM or in AD, so changing host file in working environment is a little bit risky since we have there few more sites and applications.

Regards,

Uri

Was this reply helpful? Yes No
Mohammad Atif on at

Like (0)

Report

Have you tried remapping the CRM user .

1. Launch CRM as an Administrator

2. Open the Users Settings

3. Open effected User Account

4. Change the Domain Logon Name to be a different user account that does not exist as a user in CRM (You could create a new dummy user account in AD).

5. Select Save and Close

6. Open effected User Account again, and change the Domain Logon Name back to the effected user account

7. Select Save and Close

8. Test accessing CRM with effected user’s account after closing and reopening the IE windows or probably after doing an IE reset

Note: Please make sure you have the fresh backup of the CRM databases before following the above steps in your CRM Server.

Thanks,

Mohammad

Was this reply helpful? Yes No
Farhan Syed 1,156 on at

Like (0)

Report

Hi Uri,

You have mentioned an important point, "that user from other users is that he was created today."

Have you had issues earlier when you created a user in the AD and on the same 'day' the CRM User was unable to login?

If yes, then did you have multiple DC's (at that time) or you still have it; reason may be related to the sync.

If No, Can you try add (say) a test user in the AD and retrieve it immediately in CRM via the 'User Wizard'. If not, then there are sync issues wiith the DC. If not, then the problem exists within this specific user. (you could also give a shot to point no 6 of Mohammad Atif;s above post)

If the above two options still dont' work, you need to try the (usual savior) CRM Diagnostic Tool which you download from https://crmdiagtool2011.codeplex.com/. Generate the file and if the case exists, try sharing the file on the forum.

Was this reply helpful? Yes No