Hi,

I'm trying to set up a new Organization, but get an error that the 
Organization wasn't created. When I then look at the logfile, I get the 
error message shown below. It's the last part of the log file. It seems like 
it's the first couple of lines that is the actual errormessage. I have tried 
to google for these messages, but haven't really found anything useful.
We already have several organizations setup so it has worked at some time. 
The "only" difference since last time I set up a new Organization, is that I 
have applied RollUp4.

I haven't had a change to re-boot the server yet, but that would be one of 
my next steps.


11:28:02|  Error| Create new Organization (Name=WDHHA, 
Id=951006a2-a04a-de11-9f74-001d091f627d) failed with Exception:
System.Reflection.TargetInvocationException: Exception has been thrown by 
the target of an invocation. ---> 
System.DirectoryServices.DirectoryServicesCOMException (0x80072035): The 
server is unwilling to process the request. (Exception from HRESULT: 
0x80072035)
   --- End of inner exception stack trace ---
   at System.DirectoryServices.DirectoryEntry.Invoke(String methodName, 
Object[] args)
   at 
Microsoft.Crm.BusinessEntities.SecurityUtils.AddPrincipalToGroup(SecurityIdentifier 
sid, DirectoryEntry groupEntry)
   at Microsoft.Crm.BusinessEntities.SecurityUtils.AddPrincipalToGroup(Guid 
principalId, SecurityIdentifier sid, Guid groupId)
   at 
Microsoft.Crm.BusinessEntities.SecurityLibrary.AddPrincipalToGroup(Guid 
principalId, SecurityIdentifier sid, Guid groupId)
   at 
Microsoft.Crm.ObjectModel.SystemUserServiceInternal`1.ManageGroupsHelper(Guid 
activeDirectoryGuid, SecurityIdentifier identifier, Boolean remove, 
ExecutionContext context)
   at 
Microsoft.Crm.ObjectModel.SystemUserServiceInternal`1.AddPrincipalToGroups(Guid 
activeDirectoryGuid, SecurityIdentifier identifier, ExecutionContext 
context)
   at 
Microsoft.Crm.ObjectModel.SystemUserServiceInternal`1.CreateInternal(Guid 
organizationId, IBusinessEntity systemuser, ExecutionContext context)
   at 
Microsoft.Crm.ObjectModel.SystemUserServiceInternal`1.ProvisionCreate(IBusinessEntity 
systemuser, ExecutionContext context)
   at 
Microsoft.Crm.ObjectModel.OrganizationServiceInternal`1.CreateRootBusiness(IBusinessEntity 
organization, IBusinessEntity business, IBusinessEntity systemUser, 
ExecutionContext context)
   at 
Microsoft.Crm.Setup.Server.Utility.NewOrgUtility.OrganizationCreateNew(String 
organizationId, String organizationName, String userAccountName, String 
userFirstName, String userLastName, String userEmail, String featureSetFile, 
String languageCode, String privilegedUserGroup, String sqlAccessGroup, 
String userGroup, String reportingGroup, String privilegedReportingGroup, 
Boolean grantNetworkServiceAccess)
   at 
Microsoft.Crm.Setup.Server.Utility.NewOrgUtility.ConfigureOrganization(String 
organizationId, String organizationName, String userAccountName, String 
userFirstName, String userLastName, String userEmail, String languageCode, 
String privilegedUserGroup, String sqlAccessGroup, String userGroup, String 
reportingGroup, String privilegedReportingGroup, Boolean 
grantNetworkServiceAccess, Boolean autoGroupManagement, String 
importFileLocation, Boolean sqmOption)
   at Microsoft.Crm.Tools.Admin.CreateOrganizationInstaller.Create(Guid 
organizationId, String organizationUniqueName, String 
organizationFriendlyName, String baseCurrencyCode, String baseCurrencyName, 
String baseCurrencySymbol, String initialUserDomainName, String 
initialUserFirstName, String initialUserLastName, String sqlServerName, Uri 
reportServerUrl, String privilegedUserGroupName, String sqlAccessGroupName, 
String userGroupName, String reportingGroupName, String 
privilegedReportingGroupName, String applicationPath, String languageId, 
Boolean sqmOption, String organizationCollation, MultipleTenancy 
multipleTenancy)
11:28:02|Warning| Attempting to cancel a long running process: 
ProgressWizard. This might leave the data in an invalid state and the 
application might not function correctly.

-- 
Regards
Steen Schl�ter Persson (DK) 

Hi Steen,

I'm having the same issue on an installation here. Found the workaround to 
uninstall Update Rollup 4, create the organisation and re-install the Rollup.
This, of course, is not really amusing, but it worked for me.

Did you find a better solution to this?

Regards,
Ludger

"Steen Schlüter Persson" wrote:

> Hi,
> 
> I'm trying to set up a new Organization, but get an error that the 
> Organization wasn't created. When I then look at the logfile, I get the 
> error message shown below. It's the last part of the log file. It seems like 
> it's the first couple of lines that is the actual errormessage. I have tried 
> to google for these messages, but haven't really found anything useful.
> We already have several organizations setup so it has worked at some time. 
> The "only" difference since last time I set up a new Organization, is that I 
> have applied RollUp4.
> 
> I haven't had a change to re-boot the server yet, but that would be one of 
> my next steps.
> 
> 
> 11:28:02|  Error| Create new Organization (Name=WDHHA, 
> Id=951006a2-a04a-de11-9f74-001d091f627d) failed with Exception:
> System.Reflection.TargetInvocationException: Exception has been thrown by 
> the target of an invocation. ---> 
> System.DirectoryServices.DirectoryServicesCOMException (0x80072035): The 
> server is unwilling to process the request. (Exception from HRESULT: 
> 0x80072035)
>    --- End of inner exception stack trace ---
>    at System.DirectoryServices.DirectoryEntry.Invoke(String methodName, 
> Object[] args)
>    at 
> Microsoft.Crm.BusinessEntities.SecurityUtils.AddPrincipalToGroup(SecurityIdentifier 
> sid, DirectoryEntry groupEntry)
>    at Microsoft.Crm.BusinessEntities.SecurityUtils.AddPrincipalToGroup(Guid 
> principalId, SecurityIdentifier sid, Guid groupId)
>    at 
> Microsoft.Crm.BusinessEntities.SecurityLibrary.AddPrincipalToGroup(Guid 
> principalId, SecurityIdentifier sid, Guid groupId)
>    at 
> Microsoft.Crm.ObjectModel.SystemUserServiceInternal`1.ManageGroupsHelper(Guid 
> activeDirectoryGuid, SecurityIdentifier identifier, Boolean remove, 
> ExecutionContext context)
>    at 
> Microsoft.Crm.ObjectModel.SystemUserServiceInternal`1.AddPrincipalToGroups(Guid 
> activeDirectoryGuid, SecurityIdentifier identifier, ExecutionContext 
> context)
>    at 
> Microsoft.Crm.ObjectModel.SystemUserServiceInternal`1.CreateInternal(Guid 
> organizationId, IBusinessEntity systemuser, ExecutionContext context)
>    at 
> Microsoft.Crm.ObjectModel.SystemUserServiceInternal`1.ProvisionCreate(IBusinessEntity 
> systemuser, ExecutionContext context)
>    at 
> Microsoft.Crm.ObjectModel.OrganizationServiceInternal`1.CreateRootBusiness(IBusinessEntity 
> organization, IBusinessEntity business, IBusinessEntity systemUser, 
> ExecutionContext context)
>    at 
> Microsoft.Crm.Setup.Server.Utility.NewOrgUtility.OrganizationCreateNew(String 
> organizationId, String organizationName, String userAccountName, String 
> userFirstName, String userLastName, String userEmail, String featureSetFile, 
> String languageCode, String privilegedUserGroup, String sqlAccessGroup, 
> String userGroup, String reportingGroup, String privilegedReportingGroup, 
> Boolean grantNetworkServiceAccess)
>    at 
> Microsoft.Crm.Setup.Server.Utility.NewOrgUtility.ConfigureOrganization(String 
> organizationId, String organizationName, String userAccountName, String 
> userFirstName, String userLastName, String userEmail, String languageCode, 
> String privilegedUserGroup, String sqlAccessGroup, String userGroup, String 
> reportingGroup, String privilegedReportingGroup, Boolean 
> grantNetworkServiceAccess, Boolean autoGroupManagement, String 
> importFileLocation, Boolean sqmOption)
>    at Microsoft.Crm.Tools.Admin.CreateOrganizationInstaller.Create(Guid 
> organizationId, String organizationUniqueName, String 
> organizationFriendlyName, String baseCurrencyCode, String baseCurrencyName, 
> String baseCurrencySymbol, String initialUserDomainName, String 
> initialUserFirstName, String initialUserLastName, String sqlServerName, Uri 
> reportServerUrl, String privilegedUserGroupName, String sqlAccessGroupName, 
> String userGroupName, String reportingGroupName, String 
> privilegedReportingGroupName, String applicationPath, String languageId, 
> Boolean sqmOption, String organizationCollation, MultipleTenancy 
> multipleTenancy)
> 11:28:02|Warning| Attempting to cancel a long running process: 
> ProgressWizard. This might leave the data in an invalid state and the 
> application might not function correctly.
> 
> -- 
> Regards
> Steen Schlüter Persson (DK) 
> 
> 
> 

Hi,

I had MS Support work on the issue, and we found that it's caused by the 
user creating the Organizqtion and the server not being in the same domain. 
Eventhough we have a full two-way trust between our different domains, it 
didn't worked. Apparently it's stated in the documentation somewhere that it 
has to be in the same domain.
The "funny" thing is that it has worked for use before with the user and 
server being in different domains so I'm almost certain that it's something 
that has been implemented with RollUp 4 (...which you also seems to have 
found out.)

Other than having the user and the server in the same domain, you can go to 
the registry on the server, and change the Auto Group Management setting to 
1 ( HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSCRM\AutoGroupManagementOff). 
This setting will make CRM skip the part that adds users/servers to the AD 
groups. If you do a setup where these accounts doesn't already exists in 
these groups, you'll have to add them manually afterwards. In our case, it 
was a new Organization on a deployment that already had organizations so I 
didn't had to add anything.
I don't really know the reason for this limitation and it's an annoying one, 
but as you see there are fairly simple workarounds for it..:-)


-- 
Regards
Steen Schl�ter Persson (DK)


"Ludger" <Ludger@discussions.microsoft.com> wrote in message 
news:0FBE0AE3-A0C4-40C1-AD2A-5EDADF01356E@microsoft.com...
> Hi Steen,
>
> I'm having the same issue on an installation here. Found the workaround to
> uninstall Update Rollup 4, create the organisation and re-install the 
> Rollup.
> This, of course, is not really amusing, but it worked for me.
>
> Did you find a better solution to this?
>
> Regards,
> Ludger
>
> "Steen Schl�ter Persson" wrote:
>
>> Hi,
>>
>> I'm trying to set up a new Organization, but get an error that the
>> Organization wasn't created. When I then look at the logfile, I get the
>> error message shown below. It's the last part of the log file. It seems 
>> like
>> it's the first couple of lines that is the actual errormessage. I have 
>> tried
>> to google for these messages, but haven't really found anything useful.
>> We already have several organizations setup so it has worked at some 
>> time.
>> The "only" difference since last time I set up a new Organization, is 
>> that I
>> have applied RollUp4.
>>
>> I haven't had a change to re-boot the server yet, but that would be one 
>> of
>> my next steps.
>>
>>
>> 11:28:02|  Error| Create new Organization (Name=WDHHA,
>> Id=951006a2-a04a-de11-9f74-001d091f627d) failed with Exception:
>> System.Reflection.TargetInvocationException: Exception has been thrown by
>> the target of an invocation. --->
>> System.DirectoryServices.DirectoryServicesCOMException (0x80072035): The
>> server is unwilling to process the request. (Exception from HRESULT:
>> 0x80072035)
>>    --- End of inner exception stack trace ---
>>    at System.DirectoryServices.DirectoryEntry.Invoke(String methodName,
>> Object[] args)
>>    at
>> Microsoft.Crm.BusinessEntities.SecurityUtils.AddPrincipalToGroup(SecurityIdentifier
>> sid, DirectoryEntry groupEntry)
>>    at 
>> Microsoft.Crm.BusinessEntities.SecurityUtils.AddPrincipalToGroup(Guid
>> principalId, SecurityIdentifier sid, Guid groupId)
>>    at
>> Microsoft.Crm.BusinessEntities.SecurityLibrary.AddPrincipalToGroup(Guid
>> principalId, SecurityIdentifier sid, Guid groupId)
>>    at
>> Microsoft.Crm.ObjectModel.SystemUserServiceInternal`1.ManageGroupsHelper(Guid
>> activeDirectoryGuid, SecurityIdentifier identifier, Boolean remove,
>> ExecutionContext context)
>>    at
>> Microsoft.Crm.ObjectModel.SystemUserServiceInternal`1.AddPrincipalToGroups(Guid
>> activeDirectoryGuid, SecurityIdentifier identifier, ExecutionContext
>> context)
>>    at
>> Microsoft.Crm.ObjectModel.SystemUserServiceInternal`1.CreateInternal(Guid
>> organizationId, IBusinessEntity systemuser, ExecutionContext context)
>>    at
>> Microsoft.Crm.ObjectModel.SystemUserServiceInternal`1.ProvisionCreate(IBusinessEntity
>> systemuser, ExecutionContext context)
>>    at
>> Microsoft.Crm.ObjectModel.OrganizationServiceInternal`1.CreateRootBusiness(IBusinessEntity
>> organization, IBusinessEntity business, IBusinessEntity systemUser,
>> ExecutionContext context)
>>    at
>> Microsoft.Crm.Setup.Server.Utility.NewOrgUtility.OrganizationCreateNew(String
>> organizationId, String organizationName, String userAccountName, String
>> userFirstName, String userLastName, String userEmail, String 
>> featureSetFile,
>> String languageCode, String privilegedUserGroup, String sqlAccessGroup,
>> String userGroup, String reportingGroup, String privilegedReportingGroup,
>> Boolean grantNetworkServiceAccess)
>>    at
>> Microsoft.Crm.Setup.Server.Utility.NewOrgUtility.ConfigureOrganization(String
>> organizationId, String organizationName, String userAccountName, String
>> userFirstName, String userLastName, String userEmail, String 
>> languageCode,
>> String privilegedUserGroup, String sqlAccessGroup, String userGroup, 
>> String
>> reportingGroup, String privilegedReportingGroup, Boolean
>> grantNetworkServiceAccess, Boolean autoGroupManagement, String
>> importFileLocation, Boolean sqmOption)
>>    at Microsoft.Crm.Tools.Admin.CreateOrganizationInstaller.Create(Guid
>> organizationId, String organizationUniqueName, String
>> organizationFriendlyName, String baseCurrencyCode, String 
>> baseCurrencyName,
>> String baseCurrencySymbol, String initialUserDomainName, String
>> initialUserFirstName, String initialUserLastName, String sqlServerName, 
>> Uri
>> reportServerUrl, String privilegedUserGroupName, String 
>> sqlAccessGroupName,
>> String userGroupName, String reportingGroupName, String
>> privilegedReportingGroupName, String applicationPath, String languageId,
>> Boolean sqmOption, String organizationCollation, MultipleTenancy
>> multipleTenancy)
>> 11:28:02|Warning| Attempting to cancel a long running process:
>> ProgressWizard. This might leave the data in an invalid state and the
>> application might not function correctly.
>>
>> -- 
>> Regards
>> Steen Schl�ter Persson (DK)
>>
>>
>> 

hrhrr, sometimes...
thanks, Steen, for providing this really helpful information.
Yes, that suits my problem pretty much. 
There are enough workarounds for this, but no one will ever give me back the 
time and nerves I spent on that one ;-)

Regards,
Ludger

"Steen Schlüter Persson" wrote:

> Hi,
> 
> I had MS Support work on the issue, and we found that it's caused by the 
> user creating the Organizqtion and the server not being in the same domain. 
> Eventhough we have a full two-way trust between our different domains, it 
> didn't worked. Apparently it's stated in the documentation somewhere that it 
> has to be in the same domain.
> The "funny" thing is that it has worked for use before with the user and 
> server being in different domains so I'm almost certain that it's something 
> that has been implemented with RollUp 4 (...which you also seems to have 
> found out.)
> 
> Other than having the user and the server in the same domain, you can go to 
> the registry on the server, and change the Auto Group Management setting to 
> 1 ( HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSCRM\AutoGroupManagementOff). 
> This setting will make CRM skip the part that adds users/servers to the AD 
> groups. If you do a setup where these accounts doesn't already exists in 
> these groups, you'll have to add them manually afterwards. In our case, it 
> was a new Organization on a deployment that already had organizations so I 
> didn't had to add anything.
> I don't really know the reason for this limitation and it's an annoying one, 
> but as you see there are fairly simple workarounds for it..:-)
> 
> 
> -- 
> Regards
> Steen Schlüter Persson (DK)
> 
> 
> "Ludger" <Ludger@discussions.microsoft.com> wrote in message 
> news:0FBE0AE3-A0C4-40C1-AD2A-5EDADF01356E@microsoft.com...
> > Hi Steen,
> >
> > I'm having the same issue on an installation here. Found the workaround to
> > uninstall Update Rollup 4, create the organisation and re-install the 
> > Rollup.
> > This, of course, is not really amusing, but it worked for me.
> >
> > Did you find a better solution to this?
> >
> > Regards,
> > Ludger
> >
> > "Steen Schlüter Persson" wrote:
> >
> >> Hi,
> >>
> >> I'm trying to set up a new Organization, but get an error that the
> >> Organization wasn't created. When I then look at the logfile, I get the
> >> error message shown below. It's the last part of the log file. It seems 
> >> like
> >> it's the first couple of lines that is the actual errormessage. I have 
> >> tried
> >> to google for these messages, but haven't really found anything useful.
> >> We already have several organizations setup so it has worked at some 
> >> time.
> >> The "only" difference since last time I set up a new Organization, is 
> >> that I
> >> have applied RollUp4.
> >>
> >> I haven't had a change to re-boot the server yet, but that would be one 
> >> of
> >> my next steps.
> >>
> >>
> >> 11:28:02|  Error| Create new Organization (Name=WDHHA,
> >> Id=951006a2-a04a-de11-9f74-001d091f627d) failed with Exception:
> >> System.Reflection.TargetInvocationException: Exception has been thrown by
> >> the target of an invocation. --->
> >> System.DirectoryServices.DirectoryServicesCOMException (0x80072035): The
> >> server is unwilling to process the request. (Exception from HRESULT:
> >> 0x80072035)
> >>    --- End of inner exception stack trace ---
> >>    at System.DirectoryServices.DirectoryEntry.Invoke(String methodName,
> >> Object[] args)
> >>    at
> >> Microsoft.Crm.BusinessEntities.SecurityUtils.AddPrincipalToGroup(SecurityIdentifier
> >> sid, DirectoryEntry groupEntry)
> >>    at 
> >> Microsoft.Crm.BusinessEntities.SecurityUtils.AddPrincipalToGroup(Guid
> >> principalId, SecurityIdentifier sid, Guid groupId)
> >>    at
> >> Microsoft.Crm.BusinessEntities.SecurityLibrary.AddPrincipalToGroup(Guid
> >> principalId, SecurityIdentifier sid, Guid groupId)
> >>    at
> >> Microsoft.Crm.ObjectModel.SystemUserServiceInternal`1.ManageGroupsHelper(Guid
> >> activeDirectoryGuid, SecurityIdentifier identifier, Boolean remove,
> >> ExecutionContext context)
> >>    at
> >> Microsoft.Crm.ObjectModel.SystemUserServiceInternal`1.AddPrincipalToGroups(Guid
> >> activeDirectoryGuid, SecurityIdentifier identifier, ExecutionContext
> >> context)
> >>    at
> >> Microsoft.Crm.ObjectModel.SystemUserServiceInternal`1.CreateInternal(Guid
> >> organizationId, IBusinessEntity systemuser, ExecutionContext context)
> >>    at
> >> Microsoft.Crm.ObjectModel.SystemUserServiceInternal`1.ProvisionCreate(IBusinessEntity
> >> systemuser, ExecutionContext context)
> >>    at
> >> Microsoft.Crm.ObjectModel.OrganizationServiceInternal`1.CreateRootBusiness(IBusinessEntity
> >> organization, IBusinessEntity business, IBusinessEntity systemUser,
> >> ExecutionContext context)
> >>    at
> >> Microsoft.Crm.Setup.Server.Utility.NewOrgUtility.OrganizationCreateNew(String
> >> organizationId, String organizationName, String userAccountName, String
> >> userFirstName, String userLastName, String userEmail, String 
> >> featureSetFile,
> >> String languageCode, String privilegedUserGroup, String sqlAccessGroup,
> >> String userGroup, String reportingGroup, String privilegedReportingGroup,
> >> Boolean grantNetworkServiceAccess)
> >>    at
> >> Microsoft.Crm.Setup.Server.Utility.NewOrgUtility.ConfigureOrganization(String
> >> organizationId, String organizationName, String userAccountName, String
> >> userFirstName, String userLastName, String userEmail, String 
> >> languageCode,
> >> String privilegedUserGroup, String sqlAccessGroup, String userGroup, 
> >> String
> >> reportingGroup, String privilegedReportingGroup, Boolean
> >> grantNetworkServiceAccess, Boolean autoGroupManagement, String
> >> importFileLocation, Boolean sqmOption)
> >>    at Microsoft.Crm.Tools.Admin.CreateOrganizationInstaller.Create(Guid
> >> organizationId, String organizationUniqueName, String
> >> organizationFriendlyName, String baseCurrencyCode, String 
> >> baseCurrencyName,
> >> String baseCurrencySymbol, String initialUserDomainName, String
> >> initialUserFirstName, String initialUserLastName, String sqlServerName, 
> >> Uri
> >> reportServerUrl, String privilegedUserGroupName, String 
> >> sqlAccessGroupName,
> >> String userGroupName, String reportingGroupName, String
> >> privilegedReportingGroupName, String applicationPath, String languageId,
> >> Boolean sqmOption, String organizationCollation, MultipleTenancy
> >> multipleTenancy)
> >> 11:28:02|Warning| Attempting to cancel a long running process:
> >> ProgressWizard. This might leave the data in an invalid state and the
> >> application might not function correctly.
> >>
> >> -- 
> >> Regards
> >> Steen Schlüter Persson (DK)
> >>
> >>
> >> 
> 
> 
>