Ask a questionAsk a question
 

AnswerCRM deployment with HMC 4.5

  • Tuesday, November 03, 2009 1:32 AMjohn.yassa Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     

    when i try to create new organization using HMC i got the follwoing error:

    <response>
      <errorContext description="
    SoapException
    code:0x8004b001
    type:Platform
    description:
    Create new Organization (Name=AlpineSkiHouse, Id=01c9eb1a-16c8-de11-8fee-000c29b
    48a22) failed with Exception:
    System.Security.SecurityException: Requested registry access is not allowed.
       at Microsoft.Win32.RegistryKey.OpenSubKey(String name, Boolean writable)
       at Microsoft.Crm.Setup.Database.RegistryHelper.getCrmKey()
       at Microsoft.Crm.Setup.Database.DatabaseUtility.UpdateDatabaseRegistryValues(
    String server, String metadataDatabaseName, String databaseName)
       at Microsoft.Crm.Setup.Database.DatabaseInstaller.CreateDatabase(Int32 langua
    geCode, String configurationFilePath, String sqlServer, String metadataDatabaseN
    ame, String databaseName, String sqlAccessGroup, String reportingGroup, String p
    rivReportingGroup)
       at Microsoft.Crm.Tools.Admin.CreateOrganizationInstaller.Create(Guid organiza
    tionId, String organizationUniqueName, String organizationFriendlyName, String b
    aseCurrencyCode, String baseCurrencyName, String baseCurrencySymbol, String init
    ialUserDomainName, String initialUserFirstName, String initialUserLastName, Stri
    ng sqlServerName, Uri reportServerUrl, String privilegedUserGroupName, String sq
    lAccessGroupName, String userGroupName, String reportingGroupName, String privil
    egedReportingGroupName, String applicationPath, String languageId, Boolean sqmOp
    tion, String organizationCollation, MultipleTenancy multipleTenancy)
    The Zone of the assembly that failed was:
    MyComputer
    Server was unable to process request.
    crmDeploymentServiceUrl='http://crmdep1l:5555/MSCRMservices/2007/crmdeploymentse
    rvice.asmx'
    WebMethod='Execute'
    RequestType='CreateRequest'
    DeploymentEntity='Organization'
    UniqueName='AlpineSkiHouse'
    FriendlyName='Alpine Ski House'
    SqlServerName='crmsql1l'
    BaseCurrencyName='US Dollar'
    BaseCurrencyCode='USD'
    BaseCurrencySymbol='$'
    State='Enabled'
    SrsUrl='http://crmsql/ReportServer'
     webSvc.Url:'http://crmdep1l:5555/MSCRMservices/2007/crmdeploymentservice.asmx'
     webSvc.Timeout(in msec):'600000'
     webSvc.UseDefaultCredentials:'True'
     CurrentSecurityPrincipal:'LINKMAILLAB\MPSPrivAcct-35874'"
          code="0x80131600"
          executeSeqNo="96">

        <errorSource namespace="CRM Provider"
            procedure="CreateOrganization"/>

        <errorSource namespace="Managed CRM"
            procedure="CreateOrganization_"/>

        <errorSource namespace="Managed CRM"
            procedure="CreateOrganization"/>

        <errorSource namespace="Hosted CRM"
            procedure="CreateOrganization"/>

      </errorContext>
    </response>


    can any one advice about that error


    john yassa

Answers

  • Saturday, November 07, 2009 3:41 AMjohn.yassa Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer

    well i have solved the problem by adding the http/crmdep1l and http/crmdep1l.linkmaillab.lab to the SPN of the CRMService account
    that has solved the problem
    it seems that setspn command didn't work from the first
    thank you all


    john yassa
    • Marked As Answer byjohn.yassa Saturday, November 07, 2009 3:41 AM
    •  

All Replies

  • Tuesday, November 03, 2009 8:00 AMckeller Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    Hi john,

    'Requested registry access is not allowed' for 'CurrentSecurityPrincipal:'LINKMAILLAB\MPSPrivAcct-35874'
    Make sure that 'LINKMAILLAB\MPSPrivAcct-35874' is a deployment administrator account in crm
  • Tuesday, November 03, 2009 8:25 AMjohn.yassa Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    he is already added as CRM administrator from the deployment manager
    john yassa
  • Tuesday, November 03, 2009 5:56 PMMichael SulzMVPUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    HI John,

    is this user a local Admin too?
    Viele Grüße

    Michael Sulz
    axcentro GmbH
    MVP für Microsoft Dynamics CRM
  • Wednesday, November 04, 2009 12:19 AMjohn.yassa Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    yes he is member of a domain group that is member of the local administrators for the 3 CRM servers (APP - SQL - DEP)
    john yassa
  • Saturday, November 07, 2009 3:41 AMjohn.yassa Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer

    well i have solved the problem by adding the http/crmdep1l and http/crmdep1l.linkmaillab.lab to the SPN of the CRMService account
    that has solved the problem
    it seems that setspn command didn't work from the first
    thank you all


    john yassa
    • Marked As Answer byjohn.yassa Saturday, November 07, 2009 3:41 AM
    •