Resources for IT Professionals > Dynamics Forums > CRM Deployment > Dynamics CRM Outlook Client 401
Ask a questionAsk a question
 

AnswerDynamics CRM Outlook Client 401

  • Saturday, February 23, 2008 3:21 AMKooty Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     

    Hi Everyone,

     

    I'm having a difficult time getting the Outlook Client for CRM 4.0 to configure correctly. Just to give everybody a quick overview, the CRM software is running on Windows 2008 Server 64-bit RTM, and is behind ISA 2006. I have correctly configured the web proxy, because I have no problems using the Web-based client.

     

    Now for the problem. When I try to configure the client with HTTP Authentication set via ISA, I get a HTTP 401 Unauthorized error, and when I try to use HTML Form Authentication via ISA, I get an "The request failed with an empty response" error.

     

    This issue has got me staying up for days and nights, and would like to get this resolved quickly.

     

    Any help would be greatly appreciated,

     

    Thanks,

    Brennan

Answers

  • Wednesday, February 27, 2008 6:32 PMKooty Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Hi Everyone,

    I finally found a solution to this one on my own. Here are the steps:

    1. Enable just Basic HTTP Authentication on the Web Listener in ISA
    2. In the Authentication tab of the Firewall Policy for the CRM, select "No authentication, but client may authenticate directly".
    3. In the To tab of the Firewall Policy for the CRM, make sure "Foreward original host header" and "Requests appear to come from the original client" is selected.
    4. In the Users tab of the Firewall Policy for the CRM, make sure it is "All Users" Instead of "All Authenticated Users" (CRUCUAL STEP)
    5. Apply the settings in ISA.
    6. Now go to "Internet Settings" on the client computer, and navigate to the security tab.
    7. Click custom level on the trusted site, and scroll to the very bottom and select “Automatic logon with current user name and password”.
    8. Add the CRM url to the trusted sites without the prefix (aka. not http://crm.company.com and just crm.company.com).
    9. Navigate to http://crm.company.com and type in your login credentials. AND CLICK REMEBER PASSWORD.
    10. Run the configuration wizard, and it should work Smile

    Hope this helps, I was struggling with this for days and nights.

    E-mail me @ bkootnekoff@gmail.com if you guys run into any more issues.

    Brennan

All Replies

  • Saturday, February 23, 2008 6:05 AMKhizerJ Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     

     

    Dear Kooty

     

    try logging in the OS using the CRm admninistrator account .(The account by whom after logging on you had installed the CRM ).

    primarily try it on WEB interface.once you enter the CRM website then you will be able to add other users (available in AD) you want to give access.

     

    try and and let me know

     

  • Saturday, February 23, 2008 6:23 PMWPJB Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     

    I have the same issue but I can not log on to the laptops witht he admin account as the laptops are not on the domain.

     

    Will

     

  • Saturday, February 23, 2008 6:33 PMKooty Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Thanks for the timely reply.

    It seems that the issue is not access rights, because the user I am trying to connect with is allowed access to the server (I can log on via the Web Interface). I have a feeling this issue has something to do with the ISA server handling the authentication in behalf of the CRM server.

    The exact error is:
    "The request failed with HTTP status 401: Unauthorized ( The server requires authentication to fufill the request. Access to the Web server is denied. Contact the server administrator. )."

    and then after I press ok.

    "Mandatory updates for Microsoft Dynamics CRM could not be applied successfully. Try running the application again."

    This seems weird, because obviously the client cannot authenticate because I never supplied credentials.

    Again, any input would be greatly appreciated.

    Thank you,

    Brennan


  • Tuesday, February 26, 2008 2:00 AMShirinab Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     

    Hi Brennan,

    have you ever find any answer for this? I'm running to the same issue.

     

    thanks.

  • Wednesday, February 27, 2008 6:32 PMKooty Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Hi Everyone,

    I finally found a solution to this one on my own. Here are the steps:

    1. Enable just Basic HTTP Authentication on the Web Listener in ISA
    2. In the Authentication tab of the Firewall Policy for the CRM, select "No authentication, but client may authenticate directly".
    3. In the To tab of the Firewall Policy for the CRM, make sure "Foreward original host header" and "Requests appear to come from the original client" is selected.
    4. In the Users tab of the Firewall Policy for the CRM, make sure it is "All Users" Instead of "All Authenticated Users" (CRUCUAL STEP)
    5. Apply the settings in ISA.
    6. Now go to "Internet Settings" on the client computer, and navigate to the security tab.
    7. Click custom level on the trusted site, and scroll to the very bottom and select “Automatic logon with current user name and password”.
    8. Add the CRM url to the trusted sites without the prefix (aka. not http://crm.company.com and just crm.company.com).
    9. Navigate to http://crm.company.com and type in your login credentials. AND CLICK REMEBER PASSWORD.
    10. Run the configuration wizard, and it should work Smile

    Hope this helps, I was struggling with this for days and nights.

    E-mail me @ bkootnekoff@gmail.com if you guys run into any more issues.

    Brennan
  • Thursday, February 28, 2008 5:22 AMKooty Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Also, run the following on the SQL server.\

    USE MSCRM_CONFIG
    Update DeploymentProperties SET NVarCharColumn = 'my.crmserver.inet:80' WHERE ColumnName = 'AsyncSdkRootDomain'
    Update DeploymentProperties SET NvarCharColumn = 'my.crmserver.inet:80' WHERE ColumnName = 'ADSdkRootDomain'
    Update DeploymentProperties SET NvarCharColumn = 'my.crmserver.inet:80' WHERE ColumnName = 'ADWebApplicationRootDomain'

     




  • Wednesday, March 05, 2008 11:59 PMTom Hundley Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     

    Hey Kooty.  I have the exact same setup and had the exact same problem.  Turns out there is an Internet Facing Configuration tool that you can use post server installation to do most of what you described above.


    I used this and got it to work with Outlook.  I used the "Service Provider" option and pointed it to my public FQDN and it worked great.

    Here is the link for more information which details how to get Outlook up and running with CRM 4.0

    http://support.microsoft.com/kb/947423/en-us

     

    Regards,

    Tom Hundley
    Elegant Software Solutions, LLC

     

  • Sunday, June 01, 2008 6:48 AMwebmaxx1 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     

    Hi,

    if I type the CRM Server URL without the organization, I will get a 401
    Unauthorized error.
    If I type the CRM Server URL within the organization, I will get the
    following error:

    "The file '/sitename/MSCRMServices/2007/AD/CrmDiscoveryService.asmx' does
    not exist."

    Does anyone have an idea?

    Regards,

    Christian

  • Saturday, July 26, 2008 9:19 PMpsundara Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hi Christian

    i am suffering from exactly the same problem as you 
    did you find a solution in the end?

    any help appreciated

    thanks
    Prem

  • Sunday, July 27, 2008 1:15 AMpsundara Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hey everyone - given that this problem has taken up almost 20 hours of my time (and it looks like collectively for all of us hundreds of hours) to try and figure out,  i thought i would post my solution!

    i hope this helps some of you...

    when i got the error, i started to look at how CRM was actually getting to the 'virtual' site of my organization name (TSG).

    it seems like the default installation did not create the site correctly, with the virtual path incorrect.  

    so, in IIS - i stopped the CRM server, (named Microsoft Dynamics CRM).

    then i created a new site, called TSG (use your crm org name in your own case - mine is TSG).

    then configure the site to be just like the old site, but make sure you select asp 2.0 in the asp tab and then it seems to properly create a site with the correct virtual site name.

    on the ISAPI filter site, you can find the file it needs in the server/bin/ folder of the crm dynamics program file. but if found it worked ok without reinstating this

    then apply all and make sure home directory points to the crmweb folder, and also ensure that you choose the crmapp pool 
    apply all changes/restart IIS.


    then when you run the outlook config tool and it looks for your site:5555/TSG (in my case) it finds the right asmx files etc in the correct 'site' !

    hope this helps! 

    happy ms crm again Smile

    Prem

  • Monday, July 28, 2008 2:09 PMRaam108 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hi Prem,

    Thanks for posting the solution.  Do you have IFD of your CRM?  I am still getting the

    HTTP Error 401.2 - Unauthorized: Access is denied

    Not sure if it still has to do with access rights?

    Ram.

  • Monday, June 01, 2009 4:39 PMVaibhavshah Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hi Ram

    Did you get any solution on that.

    I have recent configured my CRM for SSL access. After that i am not able to configure any of my Outlook client. It was giving me the same error. Yet i have not configured my IFD on server as looking for some workaround. My web client is working properly.

    Vaibhav
    vaibhav
  • Friday, November 06, 2009 8:21 PMKChampion Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    My solution was much more basic.  I would recommend checking that before going into IIS and changing security levels, etc.

    We have multiple organizations on our web server, so when the Outlook for CRM configuration tool prompted me for URL of CRM, I specified the organization-specific address:
    http://myWebServer/myOrganizationName/loader.aspx.  This caused the "mandatory updates for dynamics CRM could not be applied successfully" message.

    When I tried again using just the server reference, http://myWebServer, the system proceeded, then prompted me with a picklist of available organizations.  I selected the organizations, and I was ready to go!