Can not add new user in crm 3

I can no longer add a new user in CRM 3 using the deployment manager interface

I get the following error:

Invalid code for CRM error (80070005) - SOAP Server Application Faulted

note: the crm server is a domain controller
11/3/2006 9:47:01 PM
crm 35858 articles. 1 followers. Follow

2 Replies

Similar Articles

[PageSpeed] 15

1. Check what account is starting the CRM services (Local System or a Domain 

2. Install the Windows 200X Support Tools on the CRM Server. Run 
suptools.msi from Support | Tools folder on the 200X Server CD.

3. Click Start | Run, enter adsiedit.msc and click OK

4. Locate the root CRM OU under the Domain

5. Right-click, select Properties, then click the Security Tab

6. Add the computer account if Step 1 was set to Local System or add the 
domain account that was listed.

7. Grant Full control and select Advanced

8. Select the rights just added and click Edit

9. Select "this object and all child object" in Apply onto

10. Test adding a user

"Jason (Vertexx)" wrote:

> I can no longer add a new user in CRM 3 using the deployment manager interface
> I get the following error:
> Invalid code for CRM error (80070005) - SOAP Server Application Faulted
> note: the crm server is a domain controller
11/3/2006 11:08:01 PM
I have seen this before by clients.  Here is a long list of troubleshooting 
steps I have gone through with multpile partners. Remember, if at any time 
you find the error corrected, then you do not need to go further. 

Check the permissions on the following AD Container (Support Tools must be 
installed on the DC, and can be found on the Windows installation media)
CN=AdminSDHolder,CN=System,DC=MyDomain,DC=Com AD container. 

The following Allow permissions need to be added for the Authenticated Users 
Read (Regular Permission)
List Contents (Advanced Permission)
Read All Properties (Advanced Permission)
Read Permissions (Advanced Permission)

After applying these permissions attempt to add the users again.  If this 
doesn't work is the user trying to add the CRM users a member of the Domain 
Admin group? Does the user logged on or a group he/she is a member of have 
permission on the UserGroup and ReportingGroup (See below)?
• Read 
• Write 
• Add/Remove self as member 
Advanced permissions 
• List Contents 
• Read All Properties 
• Write All Properties 
• Read Permissions 
• Modify Permissions 
• All Validated Writes 
• Add/Remove self as member 

Please change the following registry key on the CRM Server.
Registry Hive: HKLM\Software\Microsoft\MSCRM
Key: AutoGroupManagementOff
Value: Change to 1

Try to add the user to CRM again. Does it still fail with an error message?
You will have to manually add the user to the UserGroup and ReportingGroup.

If you are still having problems then perhaps we are looking at invalid 
access to the OU and/or Groups for CRM. Please make sure the user or account 
that is running the CRMAppPool has permissions on the OU in AD. 

Additionally, in the Web.config file located in the Home Directory of the 
CRM Website, set or verify the following element: <identity 

When you set the impersonate attribute of the identity element to true, you 
configure the application to use client impersonation on each request to the 
application server. By default, impersonation is disabled in a typical 
ASP.NET Web application in Microsoft Visual Studio .NET. A caller to the 
Microsoft Dynamics CRM Web services must provide valid domain credentials to 
the Microsoft CRM Web service. Therefore, when you do not specify 
credentials, or when you use impersonation, the correct credentials are not 
provided to the Microsoft Dynamics CRM Web services. Therefore, the exception 

We also need to grant Network Service privileges to the OU you have CRM 
pointing to. Please switch Key: AutoGroupManagementOff back to Value: 0 and 
reset IIS.

You can apply the permissions by following the steps below:

- Open Active Directory Users and Computers (Start | Run | dsa.msc)
- Select View | Advanced Features (If it is not already checked)
- Right click on the CRM OU and select Properties
- Select the Security tab
- Select Add | Network Service | OK
- Select Advanced | Network Service | Edit
- Grant Network Service the following Permissions: 

For testing purposes, I would like to grant Full Control to the OU for 
Network Service. If it works to add users by granting full control, please 
apply the permissions listed below:

List Contents
Read All Properties
Read Permissions
Read adminDescription
Read adminDisplayName
Read cn
Read countryCode
Read gPLink
Read gPOptions
Read heuristics
Read legacyExchangeDN
Read Managed By
Read msCOM-PartitionSetLink
Read msCOM-UserLink
Read msCOM-UserPartitionSetLink
Read msDS-Approx-Immed-Subordinates
Read msDs-masteredBy
Read msDS0MembersForAzRoleBL
Read msDS-NCReplCursors
Read msDS-NCReplInboundNeighbors
Read msDS-NCReplOutboundNeighbors
Read msDS-NonMembersBL
Read msDS-ObjectReferenceBL
Read msDS-OperationsForAzRoleBL
Read msDS-OperationsForAzTalkBL
Read msDS-ReplAttributeMetaData
Read msDS-ReplValueMetaData
Read msDS-TasksForAzRoleBL
Read msDS-TasksForAzTaskBL
Read msExchADCGlobalNames
Read msExchALObjectVersion
Read msExchHideFromAddressLists
Read msExchInconsistentState
Read msExchPolicyList
Read msExchUnmergedAttsPt
Read name
Read Name
Read OwnerBL
Read postalAddress
Read postalCode
Read postOfficeBox
Read replicatedObjectVersion
Read replicationSignature
Read showInAddressBook
Rest st
Read stree
Read structuralObjectClass
Read unmergedAtts

Also remember to give Network Service Full Control on the UserGroup and 
ReportingGroup. It will need privileges on those two groups in order to add 
the users to the groups.  See KB 908984. This details the required 

If all else fails then the repair process has resolved this issue in the 
past. Since removing the auto group management we know it is an issue with 
permissions. The repair process should correct the AD permissions issues when 
it is run. At this point we have tried to manually add the permissions to the 
groups but it isn't working correctly. When run by a domain administrator, 
the repair process will make sure all of the permissions are set and that the 
connections are also correct. It will require up to one hour of downtime for 
the repair process to complete. If this issue was run by the Microsoft CRM 
dev team, the first question they will ask is if a repair was run. Because of 
this the repair is the next step in the troubleshooting of this issue. Once 
completed please attemt to recreate the issue.

If you have customizations, you shouldn't have to worry about them or your 
isv.config file. The repair shouldn't alter them.

My advice to you in this situation is to export your customizations which 
will include the isv.config file. I would also make a backup of your CRM 
databases in SQL to be on the safe side. Your custom entities shouldn't be 
altered but it's better to be safe than sorry.

I hope this helps. Let me know how it goes!
11/6/2006 6:19:02 PM

Similar Artilces:

how do i add time up in exel
everytime i use =sum(a1:a30)*24 i keep getting an odd number even though i only enter even numbers ,this is to add my hours worked in a month Tell us what's in a1:a30. If they are all even numbers, you should definitely get an even result. But if they include minutes, you can get an odd number of hours. -- Regards, Fred Please reply to newsgroup, not e-mail "loadie" <> wrote in message > everytime i use =sum(a1:a30)*24 i keep getting an odd number even though > i &g...

How to recover if a user "Undoes" a record?
When the AfterUpdate event of my Status field is triggered, I update several other tables with dependent data. What happens if someone hits ESC twice to Undo the record? Is there some way I can know that this happened? Then I could roll back any updates. Btw, the Form_AfterUpdate event doesn't seem applicable since one of the things I do is set a DateCompleted field on the form itself. Any ideas or suggestions would be welcome. You could trap the keystrokes, but it might be a better idea to use the AfterUpdate event of the form itself to update the other tables. That event only ...

pop3 #3
My outlook express hasnt been working since I got my new Dell computer. It says that the "POP3" isnt connected so i cant receive or send e-mail!!! HELP!! How do i fix this problem? I've tried calling Dell and Microsoft and have waited hours on the phone and have not gotten any assistance! Who is your ISP/mail host? Seems like you might want to contact them for support. I presume you can get to the Internet just fine.... rose wrote: > My outlook express hasnt been working since I got my new > Dell computer. It says that the "POP3" isnt connected so > i ca...

Can I send a recurring e-mail automatically each week
I want to send a e-mail with the same verbiage to the same person once a week and make it a recurrence with no end date. Can I set this up once in Outlook so it is scheduled automatically? -- Microsoft Office 2003 Version Students and Teachers Edition Windows Vista Home Premium Thank-you Happy new Year!! Carl R ...

Transferring over outlook data to new XP machine
How do I transfer over my old emails, address book to my new XP machine? I have looked over the internet and found nothing the tells me EXACTLY how to do this, any help would be greatly appreciated. If your using MS Outlook copy your .PST file across and import it into the new install. >If your using MS Outlook copy your .PST file across and import it into the new install. No, don't import it. Simply use "File">"Open" -- Brian Tillman Smiths Aerospace 3290 Patterson Ave. SE, MS 1B3 Grand Rapids, MI 49512-1991 Brian.Tillman is the nam...

Exchange 2003 new install can not receive external email.
I have just setup a new Windows Server 2003 standard edition with Exchange 2003 standard edition on it. I have been working for a while trying to get it to receive external email. I can send out and send/ receive internal messages, but when someone trys to send me a message from outside our network they get the following returned mail message This Message was undeliverable due to the following reason: Each of the following recipients was rejected by a remote mail server. The reasons given by the server are included to help you determine why each recipient was rejected. Recipient: <**...

Unlocking a User
I have GP10 and a user entered a password wrong too many times. I am logged into GP and an under 'Admininstration' and do not see a way to unlock the user. Am I in the right place? Where do I need to go? Thanks, John John, Are you enforcing password policies for your users in GP? If so, go to Microsoft Dynamics GP > Tools > Setup > System > User. Enter a temporary password for the user and check the Change Password Next Login box. Provide the user with the temporary password and the system will do the rest. Again, this is all assuming your are enforcing pas...

New Disk storage
Hi, I'm planning on adding a new SAN to our Exchange system (Active/Passive 2 node cluster) and this has been connected to the Exchange cluster nodes and is accessible as shared disk storage. But that isn't the question I've got, basically the mail stores are currently located on a Powervault (Drive S:) and I need to present a plan for moving this data (14 databases) onto the SAN storage, I can see two options Option1) Use the ESM to migrate databases to new drive letter 1. Use exmerge to export all email to PST files (and ensure backup) 2. use the ESM utility to change the...

How do I create several NEW templates from start to finish please?
Hi knowledgeable people. I am looking for instructions on how to create a range of basic templates that I can use, perhaps even by selecting them as 'stationery', for example; if I go to >New >Format >Apply stationery, or any other similar method. I can create new html stationery backgrounds, but this is NOT what I am looking for, as a lot of people still read email in plain text only...does this make sense? Plain text templates would be fine. I simply can't find any info on creating email templates anywhere to suit this Windows Live Mail Desktop versio...

transferring to new pc
I had to replace my pc and to migrate my money files to the new pc i first made a new backup diskette which I then opened on my new pc. Afer downloading transactions, the balances on about half my credit card and bank account are slightly off. What gives? ...

can't customize toolbar
Version: 2008 Operating System: Mac OS X 10.5 (Leopard) Processor: Intel all i see is document elements, quick tables, charts and smartart graphics. i do not see the main menu or the toolbar button. when i attempt to customize the toolbar, the to menu bar and format bar do not appear where they should. on a website i visited, they advised that i drag and drop the temporary toolbar into the real toolbar. but i can't drag and drop the toolbar. i can only move the temporary toolbar. how do i add the menu bar and format bar for go? You may have hidden the toolbar by accident. Click on the ti...

how do i add "Software Digrams" Folder in my Visio 2003
how do i add software diags folder in visio 2003 version. Like if i go to File->New it shows folders like brainstorming, project schedule, block diagrams but in my case its missing the Software Diags folder which contains activity diags, web mock ups, use case diags etc. please let me know how to get that template. thanks. Ankur What edition of Visio are you using? Check by going to the About Microsoft Office Visio dialog from the Help menu. "Ankur" <> wrote in message > how...

How can I change 'Normal' Style for Word e-mails to 'Normal (Web)'?
Hi, I'm using Word as my e-mail editor in Outlook 2003 and want to change the default Style for e-mails from 'Normal' to 'Normal (Web)'. The problem is that new e-mails and replies in HTML format use the 'Normal' Microsoft Word 'Style', and this has no gap after paragraphs. The upshot of this is that when sending an e-mail, I have to press return twice to create a gap, but when the recipient views this, their software shows it as four gaps (the extra carriage return I typed + their correctly viewed HTML carriage return after each line). E.g. I type this: ...

Creating new attributes
When using Schema Manager to create new attributes, I'm not able to create a new attribute with "Lookup" as type, "Lookup" is not availabe as one of the type options. But yet some of the exist fields, for example, in Account table came with "Lookup" as type. Why? Is there a work-around? Please help. Thanks. You cannot add custom lookup's to the current release of MSCRM. The only way around is to build a custom .aspx page and build your own. Might be possible in the next release. "HEC" wrote: > When using Schema Manager to crea...

Install Exchange 2003 Server on new Hardware with same name
I got a new server to move my Exchange Server Installation. I want to keep the name I'm using now for my Server. Already read TechNet Article "How to Move Exchange Server 2003 to New Hardware and Keep the Same Server Name". Is there anything else that I should be aware of that is not on this TechNet article? I'm using a different Disk Configuration, does this matters? Should this be a smooth process? Thanks for any help you can give. The drive letters MUST match, because the paths of the databases are at the Active Directory. The disks can have different sizes than the or...

McAfee 8.5.0i on access scan slows down MS Dynamics CRM web client
Our organization's McAfee 8.50i slows down MS Dynamics CRM v4 - on premise web client considerabley when loading forms and data. Besides completely disabling McAfee, does anyone know how to configure McAfee (or configure CRM) to ignore CRM related form and data loads. When disabling the oncaccess scan, or when disabling the scriptcan - it improves lookups from 8-9 seconds to 4-5 seconds. However, the organizatin policy is to have these enabled. What to do? We have the same behavior, and went we reported to Microsoft says that no solution has, then we buy and install Microsoft Securi...

Upgrade CRM 4.0 Professional to CRM 4.0 Enterprise
When I enter the CRM license code in the Deployment Manager to upgrade to Enterprise I get a message "The license code entered is not valid for upgrade. Make sure you have entered the license code correctly, and then try again". Do I have to reinstall CRM 4 to install Enterprise? Hi, what is your current installation? Professional? Have you entered trial version license keys ? /Aamir Current is Professional. I got the key from our MSDN subscription which didn't indicate a trial license. I was able to install the Enterprise edition on a test server using the same key w...

Can you only merge up to a certain number of cells
I am working on microsoft excel 2003, I have a sheet that I merged cells starting with line 8 through 43...when I type my information in the merged area I can see all that I am typing...say it goes up to line 30 once I hit the enter key I can only see up to line 20. Even when I print it out it only prints up to line 20...I have checked to make sure there are not locked cells etc. I cannot figure out at all why this is there only up to a certain number of cells you can merge? From "Excel Specifications and Limits" Length of cell contents (text) ...

Can anyone help ?
I have created a holiday planner for staff with in are company and i need a formula that gives us only 10% of the total number of staff are off on holiday. would be greatful if anyone could help. Hello - If you have a total somewhere (I would suggest inserting a column on your spreadsheet titled Total and then entering a "1" if the person is going to be out, then total the column of "1"s by entering "=SUM(x:y)" where x=first cell in the range, and y=last cell in the range), in a different cell, enter "=.1*z" where z equals the total of people out...

Can I make messages unable to be forwarded by the receiver?
We are interested in setting up a private email group at work that receives semi-confidential information. Is there a way to make the emails that these users will receive unable to be forwarded to people outside of the group? Make private, or somehow else prevent the information from getting outside of the approved recipient list? no. and you can't keep people from printing it, copying and pasting the contents of it, taking a screen shot of it, etc, etc... "Jonna Kosalko" wrote: > We are interested in setting up a private email group at work that receives ...

Event Planning/Event Management Add-On
Does anyone know of a good add-on to handle event planning? It appears that Axonom sells a product. I'm not sure it's compatible with CRM 3.0, though. The screen shots are from 1.x. We're looking for an add-on that will help us plan our annual user conference with about 300 attendees. Before I go off and build our own custom entities to handle this stuff, I thought I'd see what's out there. Our requirements are pretty basic: - Track attendees to the event, and which training sessions and activities they'd like to attend. - Payment information including total fee...

CRM tools
Hi, I'm working with CRM, and i listening about many tools that i didn't find. Example CRMDiag and more patches that repair a lot of knowed errors and warrings. Anybody know an url to download them? thanks Hello, If you have any problems with your CRM deployment you can issue a support call to Microsoft Dynamics. They will supply you with these tools if this is needed to resolve the case. Best regards, Merijn van Mourik "makeio" wrote: > Hi, > > I'm working with CRM, and i listening about many tools that i didn't > find. Example CRMDiag and mor...

[b]Can I download Excel data to a MS Access database?[/b]
I've built an Excel 2002 form that I want our internal customers to access from our intranet, and use. Once completed, they will send it to us as an e-mail attachment. I'd like to be able to open it, and somehow download the data from the form into an MS Access 2002 database I've built (so that we don't have to rekey it into the database). Is this possible or even feasible? Any and all help is appreciated. Thanks. :D --------- Message sent via Hi in Access check 'File - Import External data' -- Regards Frank Kabel Frankfurt, Germany "...

Outlook 2002 XP SP 3 Archive problem
Hi there I am trying to get my newly configured outlook to archive my folders. I have ust configured it to download two POP email accounts and that works fine. I have set up a set of folders below my outlook (Personal Folders / pst) inbox node and placed the relevant emails in the corresponding folders. I have gone into tools -> options -> other -> and pressed the "AutoArchive..." button -> and set the "clean out folders older than" selection boxes to "3" and "Months" and pressed the "apply these setting to all folders" button. I ...

Does CRM have a Microsoft Project like add-on?
Hello All: Does anyone know if CRM has a Microsoft Project like add-on? I was using Microsoft "Project Central" (which had it's own issues), but am looking for something like that. The best of both worlds would be an interface between the two packages. I am open to any suggestions. -Bill Project Central (v2000) was the first attempt to take MS Project to a server-based centralized solution. They have made great strides in more recent version. The latest is called "Project Server 2003" which is part of the "Enterprise Project Management Solution&q...