locked
http 401.1 error when configuring CRM Client for Outlook RRS feed

  • Question

  • I have a laptop registered to domain, logged in with a domain user, a local administrator on the laptop machine.
    Installed CRM Client for Outlook successfully.
    The laptop is currently outside the local network (of the domain) and during Configuration wizard, when typing in the URL, it cannot connect, giving me http 401.1 unauthorized error along with "Mandatory updates for Microsoft Dynamics CRM could not be applied successfully. Try running the application again."
    The address works fine on IE.
    Then I connected to local network through VPN, and the configuration wizard now works.
    It runs fine on Outlook as well.
    Then I disconnect from local network, and the CRM application loses connection right away.
    While still outside the local network, i run the configuration wizard again, and this time it gives "The configuration wizard cannot connect to the Microsoft CRM server. This might indicate that the server is down."

    So, basically, i think somewhere in DNS, or the company's firewall box, or at the server level, something is not configured correctly. And the CRM client application cannot connect to the server for some reason.
    I didnt run into this issue before for other deployments.

    Please give me advice on this.
    I would really appreciate your help.
    Thank you so much.
    Tuesday, May 5, 2009 7:47 PM

Answers

  • With crm 4.0 if you wish to connect to a offsite installation you will have to use the IFD tool.
    This will publish crm on a HTTP and HTTPS ports and allow your firewall to open the 1433 port for HTTPS traffic.
    When configuring your outlook wizard, you will be prompted for your HTTP (local) and HTTPS (Incrypted sites).

    This is why while your on the network everything works fine,but as soon as you disconnect the connection drops.
    Just remember for a security certificate if using IFD on HTTPS.

    If  this is setup correctly you will be able to, take any laptop outside your network and through internet connection access crm remotely through HTTPS

    DNS might cause aswell as SPN name so just check that.
    Do a DNS Flush on the server
    Tiaan van Niekerk http://crmdelacreme.blogspot.com Skype:tiaan.van.niekerk1
    • Marked as answer by SPCRMCnst Thursday, May 7, 2009 4:45 AM
    Wednesday, May 6, 2009 3:41 AM
  • Hi Jacob,

    this is not true.

    Each single CRM user has to be always a domain user, for web clients and CRM Client for Outlook. Without an Domain User Account it is not possible to create a CRM User. For Microsoft CRM Online this is different but this has nothing to do with IFD.

    With IFD you have anonymous authentication but the user itself has be be a domain user.

    Best regards,
    Jürgen
    Jürgen Beck

    Dipl. Kfm./Wirtschaftsinformatik
    MVP, MCSD.NET, MCITP DBA, MCDBA, MCSE
    Microsoft Certified Business Management Solutions Professional
    Microsoft Certified CRM Developer
    Microsoft Certified Trainer

    ComBeck IT Services & Business Solutions
    Microsoft Gold Certified Partner
    Microsoft Small Business Specialist

    Developing & Supporting Business Applications from small business to big enterprises covering scores of sectors

    http://www.combeck.de
    Wednesday, May 6, 2009 9:44 PM
    Moderator

All replies

  • Hi Jacob,

    "Mandatory updates for Microsoft Dynamics CRM could not be applied successfully" does not really says anything else that it was not possible to connect with the crm server.

    Have you installed Update Rollup 3 on server and client?

    Is the URL for the intranet the same like for the internet? What is your configuration for the CRM client?

    Please have a look in the deploymentproperties table in the MSCRM_CONFIG-database if sdkrootdomain and webapprootdomain are set correctly.

    Do you use IFD?

    Best regards,
    Jürgen
    Jürgen Beck

    Dipl. Kfm./Wirtschaftsinformatik
    MVP, MCSD.NET, MCITP DBA, MCDBA, MCSE
    Microsoft Certified Business Management Solutions Professional
    Microsoft Certified CRM Developer
    Microsoft Certified Trainer

    ComBeck IT Services & Business Solutions
    Microsoft Gold Certified Partner
    Microsoft Small Business Specialist

    Developing & Supporting Business Applications from small business to big enterprises covering scores of sectors

    http://www.combeck.de
    Tuesday, May 5, 2009 7:56 PM
    Moderator
  • On Premise.
    Do i still need to use IFD Tool?
    I know for other deployments it wasnt necessary for On Premise.
    I know i did pretty much everything that has worked for other deployments.
    I'm also thinking about the Update Rollup v3, but i don't know if that will fix the connection problem.
    I'll still give it a try.
    Thanks for your suggestions, and more suggestions are more than welcome :)
    Tuesday, May 5, 2009 8:01 PM
  • Hi Jacob,

    no, you don't really need the IFD when it is possible to access your Report Server over the internet.

    Best regards,
    Jürgen
    Jürgen Beck

    Dipl. Kfm./Wirtschaftsinformatik
    MVP, MCSD.NET, MCITP DBA, MCDBA, MCSE
    Microsoft Certified Business Management Solutions Professional
    Microsoft Certified CRM Developer
    Microsoft Certified Trainer

    ComBeck IT Services & Business Solutions
    Microsoft Gold Certified Partner
    Microsoft Small Business Specialist

    Developing & Supporting Business Applications from small business to big enterprises covering scores of sectors

    http://www.combeck.de
    Tuesday, May 5, 2009 8:03 PM
    Moderator
  • update rollup v3, as expected, hasn't fixed anything
    i try to rerun the configuration wizard, and when I type in the Intranet Address and External Web Address, i keep getting "The request failed with HTTP status 401: Unauthorized." and "Mandatory Updates for Microsoft Dynamics CRM could not be applied successfully. Try running the application again."
    Any help?
    Tuesday, May 5, 2009 8:12 PM
  • I may be missing something in the post, but you must be connected to the Domain in order to configure the CRM Outlook Client.  If you disconnect from the Domain, the CRM Outlook Client can no longer communicate with the CRM server and will get disabled.

    If you want to be able to run the CRM for Outlook client in a 'disconnected' environment, then I recommend installing the Offline client and take the CRM for Outlook Client offline before leaving the domain / network.
    Best Regards, Donna
    Tuesday, May 5, 2009 8:13 PM
  • You mean connected to Domain network?
    The computer is a domain computer, and the user logged in is a domain user.
    the computer is NOT on the local network though...
    however i can access the crm site through browser
    the web server is designated for crm
    when i ping the host name from outside the network, it finds the public ip assigned to the web server
    when i ping the host name inside the network (connected through vpn), it finds the local ip assigned to the web server
    i didnt have this issue before for another crm deployment
    any thoughts?
    thanks in advance...
    Tuesday, May 5, 2009 8:27 PM
  • Hi Jacob,

    Is the URL for the intranet the same like for the internet? What is your configuration for the CRM client?

    Please have a look in the deploymentproperties table in the MSCRM_CONFIG-database if sdkrootdomain and webapprootdomain are set correctly.

    Best regards,
    Jürgen
    Jürgen Beck

    Dipl. Kfm./Wirtschaftsinformatik
    MVP, MCSD.NET, MCITP DBA, MCDBA, MCSE
    Microsoft Certified Business Management Solutions Professional
    Microsoft Certified CRM Developer
    Microsoft Certified Trainer

    ComBeck IT Services & Business Solutions
    Microsoft Gold Certified Partner
    Microsoft Small Business Specialist

    Developing & Supporting Business Applications from small business to big enterprises covering scores of sectors

    http://www.combeck.de
    Tuesday, May 5, 2009 8:43 PM
    Moderator
  • they are both set to 'machinename:80'
    i'm not splitting server roles so they should match
    For rootdomainscheme i have http
    should 'machinename:80' be changed to something else?
    i had it the same way for an earlier deployment and i was still able to access from outside network and also the config wizard for crm client worked fine...
    Tuesday, May 5, 2009 9:03 PM
  • to make this clear again,
    configuration wizard ran fine when it was connected to local network through vpn, using the same address for both intranet and external address, and the add-in worked successfully when i launched Outlook
    when disconnected from the local network, the application process is disabled and cannot connect,
    but i know for a fact that this worked before for another deployment as long as you can access through web browser using the address you enter in configuration wizard
    so like i stated above in the very first post, i think this could be outside the crm issues... but i need some ideas on what else to check
    as far as i know, there was nothing abnormal
    i'm just very puzzled in this situation

    thank you so much in advance
    Tuesday, May 5, 2009 9:45 PM
  • With crm 4.0 if you wish to connect to a offsite installation you will have to use the IFD tool.
    This will publish crm on a HTTP and HTTPS ports and allow your firewall to open the 1433 port for HTTPS traffic.
    When configuring your outlook wizard, you will be prompted for your HTTP (local) and HTTPS (Incrypted sites).

    This is why while your on the network everything works fine,but as soon as you disconnect the connection drops.
    Just remember for a security certificate if using IFD on HTTPS.

    If  this is setup correctly you will be able to, take any laptop outside your network and through internet connection access crm remotely through HTTPS

    DNS might cause aswell as SPN name so just check that.
    Do a DNS Flush on the server
    Tiaan van Niekerk http://crmdelacreme.blogspot.com Skype:tiaan.van.niekerk1
    • Marked as answer by SPCRMCnst Thursday, May 7, 2009 4:45 AM
    Wednesday, May 6, 2009 3:41 AM
  • To my understanding,
    The big difference between On-premise and IFD is that for IFD, you can have non-domain users access CRM.
    Also for IFD deployment, CRM Outlook client can be configured for non-domain users, i think.
    On-premise deployment still allows you to access over the Internet, but you are authenticated through Windows authentication.
    Also, the computer must be a domain computer, and On-premise is only for domain users.

    Wednesday, May 6, 2009 3:25 PM
  • Hi Jacob,

    this is not true.

    Each single CRM user has to be always a domain user, for web clients and CRM Client for Outlook. Without an Domain User Account it is not possible to create a CRM User. For Microsoft CRM Online this is different but this has nothing to do with IFD.

    With IFD you have anonymous authentication but the user itself has be be a domain user.

    Best regards,
    Jürgen
    Jürgen Beck

    Dipl. Kfm./Wirtschaftsinformatik
    MVP, MCSD.NET, MCITP DBA, MCDBA, MCSE
    Microsoft Certified Business Management Solutions Professional
    Microsoft Certified CRM Developer
    Microsoft Certified Trainer

    ComBeck IT Services & Business Solutions
    Microsoft Gold Certified Partner
    Microsoft Small Business Specialist

    Developing & Supporting Business Applications from small business to big enterprises covering scores of sectors

    http://www.combeck.de
    Wednesday, May 6, 2009 9:44 PM
    Moderator
  • i was misunderstanding the two different concepts because in some environments, you can have On Premise deployment work outside the corporate network when the user credentials are passed correctly... but this would only be possible when you can access user profile from AD. I know from my experience this has worked.
    But in a typical environment, where you want users to access from outside the corporate firewall, IFD is a must. :)
    thanks for all the advices.
    Thursday, May 7, 2009 1:43 PM