Tech Support > Microsoft Windows > Windows CRM > What rights to assign to gain login (user access error after incidentally removing some AD rights)
What rights to assign to gain login (user access error after incidentally removing some AD rights)
Posted by Achim Gounar on July 22nd, 2003


Hi,

in our demo environment, one of the demo users in MSCRM (sales, "central
region") somehow has been a little bit "crippled" in AD, but not disabled.
Nor has it been disabled in CRM. I reassigned all rights in AD, taking one
of the other users ("western region") as an example. In MSCRM, the user
still looks fine and has never been deactivated. I still get a "user access
error" when logging into CRM (online).

1. What are the crucial points/rights to gain access in CRM?
2. If I delete the user and create one (even with same name), all existing
tasks/objects are no more "owned" by the new user, right? Can I do anything
about that? (take old GUID, put it in new user record at table level...)
3. Any other suggestion?

Thanks for a hint

Achim


Posted by John O'Donnell on July 22nd, 2003


Achim

try logging into CRM as an administrator or a user with CRM admin rights
then go to

home,settings,business unit settings,users and see if the deleted AD user is
still listed inside of CRM. If so open him up and go to actions reassign
records etc.





"Achim Gounar" <achim.gounar@orbis.de> wrote in message
news:OTPiuVCUDHA.1992@TK2MSFTNGP12.phx.gbl...


Posted by Achim Gounar on July 23rd, 2003


John,

thanks for the info. Actually, the user was just "crippled" in AD and maybe
"turned off" as a CRM user.
I followed your hint and, as I still see him activated in CRM, tried to
re-assign all records to him. Still can't get access.

In real life I would now
- create AD and CRM user b
- assign all records of user a to user b in CRM
- remove license of a
- delete a in AD

In my case, I have no other licences, as this is the MSDN version. Means: I
have to delete user a before creating user b :-) so it will be impossible to
find a real "replacement" for user a

Interesting question: How would you act in real life to save the work &
assignments & territories of a user and handle both to a "successor"?

Achim

"John O'Donnell" <csharpconsulting@hotmail.com> schrieb im Newsbeitrag
news:OQsruAIUDHA.1712@tk2msftngp13.phx.gbl...


Posted by John O'Donnell on July 23rd, 2003


Achim

As I have a test CRM environment i decided to try this out.

I deleted on my users from active directory. I was still able to go into crm
ass an admin and reassign his records. Of course I would not be able to log
on as him but i can at least assign his records to another user. Of course
in real life you would want to remove him from crm before removing him from
AD etc




"Achim Gounar" <achim.gounar@orbis.de> wrote in message
news:eHhvm7PUDHA.2276@TK2MSFTNGP10.phx.gbl...


Posted by Achim Gounar on July 24th, 2003


Thanks!

Achim
"John O'Donnell" <csharpconsulting@hotmail.com> schrieb im Newsbeitrag
news:e7BEnWSUDHA.1364@TK2MSFTNGP10.phx.gbl...


Posted by Achim Gounar on July 24th, 2003


John,

this is "funny".
Problem: "dangling" crm user that is no more "existant" in AD, keeping my
last license away from beeing reused.
Solution: 1. delete user's license in system license table
2. disable user in CRM
3. set deletion flag to 1 in system user table
4. create new user with deployment manager: Another license
shows to be available

The user's records should be reassigned before doing this. !This was only
for testing purposes!

Achim

"John O'Donnell" <csharpconsulting@hotmail.com> schrieb im Newsbeitrag
news:e7BEnWSUDHA.1364@TK2MSFTNGP10.phx.gbl...


Posted by John O'Donnell on August 1st, 2003


thanks for the followup Achim


"Achim Gounar" <achim.gounar@orbis.de> wrote in message
news:OYE5lLeUDHA.1776@TK2MSFTNGP09.phx.gbl...



Similar Posts