Answered by:
Can't access CRM website on CRM server

Question
-
Good day
I can't access my organization using Internet explorer on the same server as where CRM is installed.
I can access the organization from any Win7 PC using IE x32 and x64, I can also access the organization using server 2008 R2, from any of my subnetworks.
I just can't access the organization on that server.
Here is some detail to help you.
Server 1: AD
Server 2: SQL and SRS data connector
Server 3: Full CRM installation.
The URL that I use is https://crm.mydomain.co.za/org1 (I have change the Web Address to make use of this URL)
So the URL works fine even CRM for Outllok uses that URL just fine.
The error that I get when accessing the organization from server 3 is
HTTP Error 401.1 - Unauthorized
I have used the CRM Deployment Aministrators account and a Administrator account in CRM, none of those account worked, but both work from any other PC or server.
I have a strong feeling that this is also the same reason why I can't get the email router to work.
Regards
Blaps
Sunday, July 10, 2011 5:34 PM
Answers
-
Hi found the resolution for this problem. It is covered in this KB
http://support.microsoft.com/kb/887993
I used Method 1 to resolve it.
It has to do with a registery key. Althou the KB is for IIS 6 it worked on IIS 7.
- Marked as answer by Blaps Friday, July 15, 2011 6:45 PM
Friday, July 15, 2011 6:45 PM
All replies
-
Can you access CRM from server 3 if you use https://localhost:5555. I'm assuming you are not using the default web site. If you installed CRM to the default web site then try just https://localhost Also, ensure that none of your Services logins are using a CRM user login to start the services. You might also try right-clicking IE and select Run As Administrator to rule out any security issues. This could be related to a security issue on the server that is blocking the login. We can at least try ruling out any security issues first.
Sunday, July 10, 2011 5:58 PM -
Hi Donna
Thanks for the qiuck response.
None of the services use a log on account that is used by a user of CRM.
Right clicking and running as Administrator didn't work.
Also using https://localhost:5555 didn't wotk, but
https://localhost did work. I can access the organization using that URL on the CRM server.
So what does this mean?
Sunday, July 10, 2011 6:09 PM -
it means that you've most likely installed CRM on the default web site which is not generally recommended. Do you need to access CRM from server 3 using a FQDN.
If you want to find out more about what is going on you can check the event viewer to for more details about the error. You could also install Fiddler and take a look at the http traffic. It could be a dns, IFD or some other network related issue.
- Proposed as answer by Jamie MileyModerator Sunday, July 10, 2011 7:12 PM
Sunday, July 10, 2011 6:52 PM -
You cannot resolve your external url for some reason from on the server. You are also using port 80 (default port), as Donna mentioned also. This is most likely a DNS issue. I am guessing this is CRM 4.0
Jamie Miley
Check out my about.me profile!
http://mileyja.blogspot.com
Linked-In Profile
Follow Me on Twitter!
- Proposed as answer by Jamie MileyModerator Sunday, July 10, 2011 7:13 PM
Sunday, July 10, 2011 7:12 PMModerator -
Well it is a CRM 2011 deployment and the version is 5.0.9688.583. And if it is a DNS problem, then why can all the other Win7 and Server 2008 R2 computers open that website with no problem and not even asking for credentials? Why would using the default port be a problem other then for security?
And if I ping http://crm.mydomain.co.za from the CRM server itself, it resolves to the correct server IP, so this also eliminates DNS.
Any other ideas?
Monday, July 11, 2011 4:51 PM -
Yes, DNS which is integrated into AD allows for proper reading of SPNs in the machine account.
I take it that the network service is running the app pool for the CRM site.
Can the machine account in the security group be resolved via an SPN query?
Oftn I've found problems like this in CRM, SharePoint and Biztalk deployments.
Here is another Idea. Check to see if there is an IP6 A record in DNS instead of an IP V4 A record.
Monday, July 11, 2011 5:37 PM -
I'll go back to my comment / suggestion:
Do you have a need to access CRM from server 3 using a FQDN? Why not just use localhost?
If you want to find out more about what is going on you can install Fiddler and take a look at the http traffic. It could be a dns, IFD or some other network related issue.
If we could answer the question, "why can all the other Win7 and Server 2008 R2 computers open that website with no problem and not even asking for credentials?" then we would know what you need to change on your network to get the FQDN working on the CRM server :)
Question:
"Why would using the default port be a problem other then for security?"
Response:
Some applications require use of the Default Web site so it could present a challenge if CRM is already using it.
- Proposed as answer by Jim Glass Jr Friday, July 15, 2011 4:55 PM
Monday, July 11, 2011 5:50 PM -
This is turing out to be a bigger headach then I was hoping for.
Cspanburgh to answer your questions.
Yes the network servives is running the app pool, and if run setspn -l crmsrv cmd then it resolves the machine account. I also found a IPv6 host A record and deleted it. But deleting the IPv6 IP did make a diferense.
Donna to answer your questions.
I need to use the the full FQDN on that server, because then I can go back to my email router and find out why that isn't working, and I have tested my email router using the http://localhost/org1 but it still can't load data. so if I can get the URL to work on the CRM serve itself then I can more confidense working on the email router.
Then sorry my bad, I for got to add in my first post that the server name is crmsrv.mydomain.co.za and that I changeg the Web Address using properties in the deployment manager to read crm:80. hope this make things a little easier.
so crm.mydomain.co.za is a DNS static host A record pointing to the IP of the crm server (crmsrv.ctutraining.co.za)
Monday, July 11, 2011 7:16 PM -
You're rightt, some things can be challenging to try and sort in an environment that is not available for view.
Based on what you've shared, it sounds like what we really need to solve is an e-mail router issue so why don't we try tackling that. Can you share your e-mail router configuration to include all the Profile Information to include each setting (Incoming, Outgoing, Deployment). You can take screenshots if that works better for you. Also, what error are you receiving with regard to the e-mail router.
Monday, July 11, 2011 8:34 PM -
Blaps, I had a problem in an international WAN like this. I think you said deleting tghe IP6 A record helped.
For the situation I resolved I found that other DNS servers on the WAN recreated the A records I deleted so make sure all of them are set like that.
Since we know we have IP 6 enabled some place on the network, it could be that some issue with the new TCP stack could cause a problem.
I've seen this a few times. Mostly on Virtual Nics. Mark Minasi and I had a discussion about it at the summit and he filled in the blanks for me.
Some parts of a header may not get through the NIC or it could be intermittent.
Or there could be a "Chimney" issue.
Things seem to be working well on other machines as you said.
After we have rounded up all the usual suspects, it's time to go after the red herring.
I'm keen to find out what this turns out to be. A switch Port? A need for an updated driver on the NIC? But the fact that the SPN query worked seems to rule that out.
Also make sure an entry in an host or Lmhost file or WINS database is not messing that server up.
IT looks like you have done everything right, but something deep in the wood is having a problem. It could even be a GUID in LDAP.
We'll stick with you as much as we can here.
Because just using Local host is ok for now , but a bad authentication is always going to "GET YOU" in the end.
Monday, July 11, 2011 9:00 PM -
cspanburg deleting the IPv6 didn't help, I made a spelling mistake in my prevoius post, sorry.
Donna can we please keep to the URL access problem, before we confuse ourself with what we really want, and that is to access the CRM organization on the CRm server using the FQDN.How do I go about adding screenshots here so that you can see the errors that I am receiving?
Thursday, July 14, 2011 5:17 PM -
If this is only a problem on the CRM Server you could probably just add a hosts file entry. Use the sample commented out lines and make a new line and fill it in with the correct ip address and then your FQDN for the server. Make sure the line is not commented out (remove the # at the beginning). You also might have to open notepad or something as an administrator and then open the file as you might get access is denied errors otherwise.
The hosts file should be in C:\WINDOWS\system32\drivers\etc or a similiar location.
This should allow you to resolve the FQDN from inside the server box.
Jamie Miley
Check out my about.me profile!
http://mileyja.blogspot.com
Linked-In Profile
Follow Me on Twitter!Friday, July 15, 2011 2:38 PMModerator -
cspanburg deleting the IPv6 didn't help, I made a spelling mistake in my prevoius post, sorry.
Donna can we please keep to the URL access problem, before we confuse ourself with what we really want, and that is to access the CRM organization on the CRm server using the FQDN.How do I go about adding screenshots here so that you can see the errors that I am receiving?
- Proposed as answer by Jim Glass Jr Friday, July 15, 2011 4:55 PM
Friday, July 15, 2011 4:14 PM -
Hi found the resolution for this problem. It is covered in this KB
http://support.microsoft.com/kb/887993
I used Method 1 to resolve it.
It has to do with a registery key. Althou the KB is for IIS 6 it worked on IIS 7.
- Marked as answer by Blaps Friday, July 15, 2011 6:45 PM
Friday, July 15, 2011 6:45 PM -
I am glad you found your answer.
Jamie Miley
Check out my about.me profile!
http://mileyja.blogspot.com
Linked-In Profile
Follow Me on Twitter!Friday, July 15, 2011 6:53 PMModerator -
Interesting, a Windows 2003, SP 1, SQL 2000, IIS 6 was the fix for a Windows 2008, SQL 2008, IIS 7.
I could have guessed for a year and never came up with that as a fix especially since it was happening for only one user and only when trying to access the FQDN from the CRM server.
Friday, July 15, 2011 9:00 PM -
hi everyone
im having almost the same issue
that i can access the CRM website from the CRM server using localhost:5555 but when i try to access it from a windows 7 computer is im getting that error "Internet Explorer cannot display the webpage"the computer is joined to the same domain
IFD is not setup
Monday, August 27, 2012 9:41 PM -
You will get more flys with honey. I only caught this because I am subscribed because I replyed before. New people probably won't get involved if the question says it is answered. I would ask this in a separate thread if the above answer did not help you.
Jamie Miley
Check out my about.me profile!
http://mileyja.blogspot.com
Linked-In Profile
Follow Me on Twitter!Tuesday, August 28, 2012 2:12 AMModerator -
http://support.microsoft.com/kb/2536453
this KB solved my problem with my crm site.
Thursday, May 29, 2014 8:31 AM -
Pease help me at this
http://social.microsoft.com/Forums/en-US/65d00c07-d7b0-496e-a503-976d4e176aef/developer-resources-problem-crm-on-premise-2013?forum=crm
Tuesday, October 7, 2014 5:27 AM