Question Status

Suggested Answer
MayaSA asked a question on 11 Aug 2017 4:38 AM

Hi all!

We are trying to implement the Dynamics NAV 2017 in our university for studying and we have to add our students to Dynamics NAV as users. We have a lot students coming and going, so, the users always change and the number of users is large. We cannot add everyone to the program.

We have an Active Directory group and we added this AD-group to Dynamics NAV as a new user ("Windows User Name" field) with License Type as “Windows Group”. We assigned to this new user the permission sets (SUPER).

Then, when the member of this AD-group tries to log on, he/she gets the following message: “You do not have access to Microsoft Dynamics NAV. Verify that you have been set up a valid user in Microsoft Dynamics NAV.” Should we do anything else to get it working?

Are there any solutions how to add an AD-group with a large number of users without creating an individual user for everyone in Dynamics NAV 2017?

Thanks in advance

Reply
Manish Sharma responded on 12 Aug 2017 5:18 AM

Create a single user (i.e. Student in your AD), and then let the students login using Student login id the PCs.

Reply
Tina Menezes responded on 13 Aug 2017 11:08 AM

Hi,

You can refer to this blog by Saurav Dhyani. There are certain steps that need to be performed using Windows PowerShell to resolve this error.

saurav-nav.blogspot.in/.../add-user-to-microsoft-dynamics-nav-2016.html

Reply
Mahesh responded on 13 Aug 2017 10:01 PM

You may use the powershell script to create a single user and use the same id to login by all the students.

Reply
Suggested Answer
Maneesha De Silva responded on 14 Aug 2017 4:28 AM

MayaSA ,

this is simple

you have several solutions to fulfill your requirement,

1. If you are willing to do this on studying purposes you better to make the user login as "Microsoft Dynamics NAV User Name / Password Authentication type'  , not the AD group

it will make you to easy handling of the user and also no need of connect with windows AD.

2. if your students coming on batch wise , you can create several dummy IDs (user name/passwords) and ask them to login through those common user IDs , then you can continue those to next batch also , no need of creating user ID to every users on board

-----

on your error

this error may occur your user card dosen't have that kind of users been created or your Windows AD not properly sync  

Reply
MayaSA responded on 14 Aug 2017 9:16 AM

Thank you all for your replies!

Tina, if I understood right, your link guides how to create a new user and how to assign a permission set, but we have already created a user for Windows authentication as the AD-group by using Dynamics NAV Windows client (Department > Administration > IT Administration > General > Users> New > “Window Authefication” FastTab > “Window User Name” field). Are there any differences between user’s creating using PowerShell and creating using program interface? Unfortunately, I’m not an IT specialist and I need more explanations. The problem is, that we can’t get the access to the program as a member of the AD-group.

 

Mahesh, could you give some more details, please? How can we link a created new user with the AD-group to give the access for all AD-group’s members with their own Windows credentials.

I have read that with Windows credential type, “users are authenticated using their Windows credentials. You can only specify Windows as the credential type if the corresponding user exists in Windows (Active Directory, local workgroup, or the local computer’s users).” https://msdn.microsoft.com/en-us/library/hh169371(v=nav.90).aspx How can we use this?

 

Maneesha De Silva, thank you, but we are interested in using windows credential to access to program in this time.

Reply
MayaSA responded on 15 Aug 2017 9:24 AM

Tina, thank you for reply.

If I understood right, your link guides how to create a new user and how to assign a permission set, but we have already created a user for Windows authentication as the AD-group by using Dynamics NAV Windows client (Department > Administration > IT Administration > General > Users> New > “Window Authefication” FastTab > “Window User Name” field).

Are there any differences between user’s creating using PowerShell and creating using program interface? Unfortunately, I’m not an IT specialist and I need more explanations. The problem is, that we can’t get the access to the program as a member of the AD-group.

Reply
Mahesh responded on 16 Aug 2017 2:39 AM

If you have already created the user in the AD, you can use that user name while creating the Windows User  either via "Administration > IT Administration > General > Users> New >

or using powershell.  

The reason why I mentioned powershell is, initially, as per your query, I thought no user is been created and you are unable to access NAV.

If you are able to access NAV, the simplest method for you to create User is via "Administration > IT Administration > General > Users> New >".

Reply
Tina Menezes responded on 18 Aug 2017 1:12 AM

Hi,

No there is no difference in creating user through program interface or through powershell. You can use one of the two methods. Powershell is an alternative to creating through program interface as given in the below link:

https://msdn.microsoft.com/en-us/library/hh169371(v=nav.90).aspx

But the reason why I suggested it to you is, I had previously faced the same error after creating new user through program interface. But then after following the powershell steps as mentioned in the link I sent you previously my error was resolved. So you can try it too and check.

Reply
Suggested Answer
Maneesha De Silva responded on 14 Aug 2017 4:28 AM

MayaSA ,

this is simple

you have several solutions to fulfill your requirement,

1. If you are willing to do this on studying purposes you better to make the user login as "Microsoft Dynamics NAV User Name / Password Authentication type'  , not the AD group

it will make you to easy handling of the user and also no need of connect with windows AD.

2. if your students coming on batch wise , you can create several dummy IDs (user name/passwords) and ask them to login through those common user IDs , then you can continue those to next batch also , no need of creating user ID to every users on board

-----

on your error

this error may occur your user card dosen't have that kind of users been created or your Windows AD not properly sync  

Reply