locked
E-mail router (On-premise) to CRM 2015 (On-line) connectivity issue RRS feed

  • Question

  • Hello Experts,

    I was trying to configure e-mail router on my location environment (working on domain administrator credentials :)) to connect to CRM 2015 Online server (TRIAL version).

    Unfortunately during "Load data" process ("Users, Queues and Forward Mailboxes" tab in E-mail Router Configuration Manager) I'm still getting "Access is denied" error.

    "CRM Server address" I'm using is: “https://disco.crm.dynamics.com/orgname” ("orgname" is 100% correct, I've also tried "DEV" instead of "DISCO" address option) and "Access credentials" specified are also correct (this is System Administrator user in my CRM organization).

    I assume that the problem is somehow connected with user account, because when I’m trying to use some fake one (ex. "fakeuser@orgname.onmicrosoft.com") the error message is different ("GetAuthStateEx(), Request Status: ").

    I was trying to use Fiddler to see problem source and I found that "Access denied" is return during accessing "https://disco.crm.dynamics.com/XrmServices/2011/Discovery.svc" URL.

    Am I missing something? Should CRM account used by e-mail router have some additional permissions except "System administrator" role in CRM?

    Any help will be really appreciated.

    Kind regards,

    Piotr

    Thursday, April 9, 2015 2:42 PM

All replies

  • Hi Piotrek,

    Apart from System Administrator security role the user should also have "Read/Write privilege on all mailboxes" on Active Directory.

    Ensure that the user is added in PrivUserGroup in AD.

    Refer this for more details

    http://blogs.msdn.com/b/crm/archive/2009/07/09/rolling-with-the-system-administrator-role.aspx

    Hope this helps!


    Regards, Abhishek Bakshi If you find this post helpful then please Vote as Helpful and Mark As Answer. Check my blog on https://mydynamicscrmblog.wordpress.com/

    Thursday, April 9, 2015 2:59 PM
  • Hello,

    Yesterday I faced pretty similar issue. I assume that you use incorrect orgname for your https://disco.crm.dynamics.com/orgname url. To get the correct one open CRM - Settings - Customizations - Developer Resources, copy Organization Unique Name and use in in org url.


    Dynamics CRM MVP
    My blog

    Thursday, April 9, 2015 3:16 PM
    Moderator
  • Hi Piotrek,

    Apart from System Administrator security role the user should also have "Read/Write privilege on all mailboxes" on Active Directory.

    Ensure that the user is added in PrivUserGroup in AD.

    Refer this for more details

    http://blogs.msdn.com/b/crm/archive/2009/07/09/rolling-with-the-system-administrator-role.aspx

    Hope this helps!


    Regards, Abhishek Bakshi If you find this post helpful then please Vote as Helpful and Mark As Answer. Check my blog on https://mydynamicscrmblog.wordpress.com/

    Hi, In my case both CRM and mail server are on-line instances. Only E-mail router has been installed in local environement. I do not have PrivUserGroup (or any other CRM-related AD group) in my AD.

    Regards,

    PG

    Friday, April 10, 2015 7:09 AM
  • I've checked unique organization name on developer resources page many times (this is very common reason of many problems with e-mail router deployments).

    Actually I'm looking at this name right now and it is 100% correct (only lowercase letters, no "strange" characters :)).

    Today - the error message looks a little different.

    I've checked above mentioned web service address ( https://disco.crm.dynamics.com/XrmServices/2011/Discovery.svc ) in IE and there is no problem with accessing it.

    I'm wondering should this error be somehow connected with fact that our CRM online organization is TRIAL version or that it is 7.0.1 version (our e-mail router is 7.0.0)?

    Any other ideas?

    Best regards,

    PG

    Friday, April 10, 2015 7:26 AM
  • Ok. I think I've found the solution...
     
    It occurs that everything works when I use https://disco.crm4.dynamics.com/orgname/XRMServices/2011/Discovery.svc URL address in e-mail router configuration, not the one described in documentation  (https://disco.crm.dynamics.com/orgname) :O

    Bad microsoft, very bad... ;)

    Best regards,

    PG

    Friday, April 10, 2015 8:31 AM
  • We are facing strange issue with CRM Email router 2016.

    CRM Version : CRM online 2016

    Profile: Outgoing (cloudmail.microsoft.com)

    We have configured the Email router settings and after clicking on Load data we are getting below error

    Error Log details after enabling CRM Email router Tracing

    #6188 - The Email Router service cannot connect to the Microsoft Dynamics CRM server or the Microsoft Dynamics CRM Online server to access user and queue information. Verify that the account that is used to run the Email Router service has sufficient permission to access the Microsoft Dynamics CRM server and that there are no connectivity problems. Microsoft.Crm.Passport.IdCrl.IdCrlException: GetAuthStateEx() - Request Status:

       at Microsoft.Crm.ServiceProxyCache`1.BuildServiceProxy(Uri serviceUrl, Credential credentials, Uri homeRealmUrl, String passportEnvironment, String onlineServiceEnvironment, IServiceConfiguration`1 serviceConfiguration)

       at Microsoft.Crm.ServiceProxyCache`1.GetNewServiceProxy(Uri serviceUrl, Credential credentials, Uri homeRealmUrl, String passportEnvironment, String onlineServiceEnvironment)

       at Microsoft.Crm.Tools.Email.Providers.OrganizationUrlCache.DiscoverOrganizationUrl(Uri discoveryServiceUrl, Credential credentials, String organizationName)

       at System.Lazy`1.CreateValue()

       at System.Lazy`1.LazyInitValue()

       at Microsoft.Crm.Tools.Email.Providers.OrganizationUrlCache.GetOrganizationUrl(Uri discoveryServiceUrl, Credential credentials, String organizationName)

       at Microsoft.Crm.Tools.Email.Providers.Utility.GetOrganizationServiceUrl(Uri discoveryUri, String authMode, String userName, String password)

       at Microsoft.Crm.Tools.Email.Providers.Utility.GetCrmService(Uri discoveryUri, String authMode, String userName, String password)

       at Microsoft.Crm.Tools.Email.Management.Deployment.LoadServerSetting()

       at Microsoft.Crm.Tools.Email.Management.Deployment.Load(BackgroundWorker backgroundWorker)

       at Microsoft.Crm.Tools.Email.Management.Configuration.UpdateAll(Boolean refreshDeployments, String configurationSettingsFilePath, String configurationFilePath)

    Error Log details in Event Viewer

    #26234 - The Email Router service could not process a provider work item using assembly: Microsoft.Crm.Tools.EmailProviders.dll and class: Microsoft.Crm.Tools.Email.Providers.SmtpPollingSendEmailProvider. Microsoft.Crm.Passport.IdCrl.IdCrlException: GetAuthStateEx() - Request Status: at Microsoft.Crm.ServiceProxyCache`1.BuildServiceProxy(Uri serviceUrl, Credential credentials, Uri homeRealmUrl, String passportEnvironment, String onlineServiceEnvironment, IServiceConfiguration`1 serviceConfiguration) at Microsoft.Crm.ServiceProxyCache`1.GetNewServiceProxy(Uri serviceUrl, Credential credentials, Uri homeRealmUrl, String passportEnvironment, String onlineServiceEnvironment) at Microsoft.Crm.Tools.Email.Providers.OrganizationUrlCache.DiscoverOrganizationUrl(Uri discoveryServiceUrl, Credential credentials, String organizationName) at System.Lazy`1.CreateValue() at System.Lazy`1.LazyInitValue() at Microsoft.Crm.Tools.Email.Providers.OrganizationUrlCache.GetOrganizationUrl(Uri discoveryServiceUrl, Credential credentials, String organizationName) at Microsoft.Crm.Tools.Email.Providers.Utility.GetOrganizationServiceUrl(Uri discoveryUri, String authMode, String userName, String password) at Microsoft.Crm.Tools.Email.Providers.Utility.GetCrmService(Uri discoveryUri, String authMode, String userName, String password) at Microsoft.Crm.Tools.Email.Providers.CrmPollingSendEmailProvider.Run() at Microsoft.Crm.Tools.Email.Agent.ServiceCore.ExecuteProviderWork(Object providerQueueRequestObject)

    When we are using service account in Email router deployment configuration facing this issue. However when I used my credential in Email router deployment configuration tab it is working fine.

    Request you to please help as this is blocking our project deliverables.

    Appreciate your help !

    Thursday, January 19, 2017 9:40 AM