locked
where does mscrm client store password RRS feed

  • Question

  • Hi guys,'

    can anyone tell me where does mscrm client store password? i need to know this to solve an issue with "every morning login prompt"
    i tried to clean IE history and tried with different profile, but its still saved. i need to know where is it stored at?

    my real issue is that all citrix users (after they logoff) have to type username/password. 

    Tuesday, May 17, 2011 11:40 AM

Answers

  • Hi Djedo,

    What you need to check is if you have authentication correctly configured for delegation. Do you use a domain account for your IIS application pool ?

    check if you have this option enabled:

    Hight light the CRM website and open the Configuration Editor, Navigate to:
    system.webServer > security > authentication > windowsAuthentication

    Set useAppPoolCredentials to True


    Visit my blog for CRM material, improving performance, kerberos, IFD, development tips, etc. :) http://quantusdynamics.blogspot.com

    Monday, June 4, 2012 9:10 PM

All replies

  • From the IE try Tools - Internet Options - Security TAB - Local Intranet - Custom Level - User Authentication - Check the option "Prompt for username and password"

    Then restart IE 


    Cheers, Francis Edwin

    Follow me on: https://twitter.com/astutecrm

    My Blog: http://astutecrm.wordpress.com/ 

    Tuesday, May 17, 2011 12:00 PM
  • From the IE try Tools - Internet Options - Security TAB - Local Intranet - Custom Level - User Authentication - Check the option "Prompt for username and password"

    Then restart IE 


    Cheers, Francis Edwin

     

    Follow me on: https://twitter.com/astutecrm

    My Blog: http://astutecrm.wordpress.com/ 

     


    i have outlook client working fine, but i need to know the path or regedit where this password is stored?

    you know when you configure mscrm outlook over IFD i select "my online provider" and i type the url for mscrm, and it configures it, then it asks for username and password, i provide it, and mark "save my password" so where dose it save this info at? where dose it save my username and password?

     

    Tuesday, May 17, 2011 12:12 PM
  • On Windows 7 you can find it in the control panel

    1. Close Outlook
    2. Open Control Panel on the user computer.
    3. In the category view, click User Accounts.
    4. Select "manage windows Credentials"
    5. Locate the Microsoft Dynamics CRM Credentials and select Edit
    6. Change the password and save.
    7. Re-launch outlook

    Tuesday, May 17, 2011 1:10 PM
  • It's using the NTLM hash system.  It's stored the same way your windows password is.  It's a one way only hash system.  In short, the computer doesn't even know your password.  It just keeps a hash of your password.  Then when you enter your password the computer hashs it and compares the hash values.  If they match, you are good to go.  

    There may some strange brute force mechanism (I think it's called rainbow tables, I have done it with a tool call Orphcrack) to break this down and get the actual passwords, but that is really beyond the scope of this forum.


    Jamie Miley
    http://mileyja.blogspot.com
    Linked-In Profile
    Follow Me on Twitter!
    Tuesday, May 17, 2011 1:12 PM
    Moderator
  • It's using the NTLM hash system.  It's stored the same way your windows password is.  It's a one way only hash system.  In short, the computer doesn't even know your password.  It just keeps a hash of your password.  Then when you enter your password the computer hashs it and compares the hash values.  If they match, you are good to go.  

    There may some strange brute force mechanism (I think it's called rainbow tables, I have done it with a tool call Orphcrack) to break this down and get the actual passwords, but that is really beyond the scope of this forum.


    Jamie Miley
    http://mileyja.blogspot.com
    Linked-In Profile
    Follow Me on Twitter!


    wow nice post, i didnt know this.
    but my issue is :

    we got around 250 users 200 is using laptops and when they configure mscrm client they mark "save my password" and they never get prompted again (unless they changes password in AD)

    but the rest of 50 users are connecting trough Citrix and here when they start Outlook the IFD logon box pops up asking for username and password, users provide the tool with info, mark "save my password" and they connect to outlook and crm client. but when they log off, and login again they get the pop up box again asking for login?

    thats why i was asking where this is stored at, so we can copy that folder to citrix. we get alot of noice from our citrix users complaying about they have to provide that info every morning.

     

    Tuesday, May 17, 2011 2:02 PM
  • I don't know much about what type of VPN is supported for CRM and what isn't I just don't know.

    A solution that would probably work satisfactorily would be to set up an IFD (Internet Facing Deployment) of CRM instead of using the VPN.  Otherwise the problem is probably going to be related to some buried setting in Citrix or what Citrix can and can't ultimately do.  The outlook client works with IFD deployed CRM also.


    Jamie Miley
    http://mileyja.blogspot.com
    Linked-In Profile
    Follow Me on Twitter!
    Wednesday, May 18, 2011 1:17 PM
    Moderator
  • We have exactly the same problem as Dzeko, and we use IFD, so I am VERY interested if anyone can give me an answer to this. Previously we worked with an internal link to CRM, and this worked fine in Citrix, but due to a mixed environment we wanted to access CRM through the IFD. After the change all users working through Citix get the login screen every morning.

    To see if it is a problem caused by Citrix, we created a roaming profile and used this locally. We have the same problem with this profile when we log on to different PC's in the LAN. 

     


    Bente Madsen
    Thursday, May 19, 2011 9:00 AM
  • Monday, June 4, 2012 5:46 PM
    Moderator
  • For the IFD to save the password you may have to setup crm/afds as a local intranet site.   We just use *.mycompany.com  so i don't know if you need the CRM site, the ADFS site or both.

    Monday, June 4, 2012 6:11 PM
  • Hi Djedo,

    What you need to check is if you have authentication correctly configured for delegation. Do you use a domain account for your IIS application pool ?

    check if you have this option enabled:

    Hight light the CRM website and open the Configuration Editor, Navigate to:
    system.webServer > security > authentication > windowsAuthentication

    Set useAppPoolCredentials to True


    Visit my blog for CRM material, improving performance, kerberos, IFD, development tips, etc. :) http://quantusdynamics.blogspot.com

    Monday, June 4, 2012 9:10 PM