Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
microsoft.crm.setup.server.addaspnetserviceaccounttosqlaccessgroupaction failed. Access is denied RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hmm any idea what setup is trying to do here

    microsoft.crm.setup.server.addaspnetserviceaccounttosqlaccessgroupaction failed. Access is denied

     

    SW

    Friday, April 1, 2011 10:17 AM

Answers

  • Question
    Sign in to vote
    1
    Sign in to vote

    I expect this is when the setup program is attempting to add an account (the identity of the CrmAppPool, which the the CRM service account specified during setup), to the Active Directory group SqlAccessGroup. It looks the the account you're running setup under does not have AD permissions to add users to this group

    Microsoft CRM MVP - http://mscrmuk.blogspot.com  http://www.excitation.co.uk
    • Marked as answer by Seb SW Thursday, April 14, 2011 12:16 PM
    Friday, April 1, 2011 3:25 PM
    Moderator

All replies

  • Question
    Sign in to vote
    1
    Sign in to vote

    I expect this is when the setup program is attempting to add an account (the identity of the CrmAppPool, which the the CRM service account specified during setup), to the Active Directory group SqlAccessGroup. It looks the the account you're running setup under does not have AD permissions to add users to this group

    Microsoft CRM MVP - http://mscrmuk.blogspot.com  http://www.excitation.co.uk
    • Marked as answer by Seb SW Thursday, April 14, 2011 12:16 PM
    Friday, April 1, 2011 3:25 PM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi David,

    we have the same problem here, but the user has the proper permissions in the OU and group to add users (full access).

    Do you have any hint?

    Greetings
    Stefan

    Tuesday, May 3, 2011 3:11 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Stefan

    If you're sure the setup user has the right AD permissions to the OU and groups, then I'd check if you have any AD replication problems

    David

    Microsoft CRM MVP - http://mscrmuk.blogspot.com  http://www.excitation.co.uk
    Wednesday, May 4, 2011 9:34 AM
    Moderator
  • Question
    Sign in to vote
    1
    Sign in to vote

    You were right, the user hadn't the proper permissions in the CRM groups.

    Thank you!

    Wednesday, May 4, 2011 9:36 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi David

    I have the same problem... On the user that is installing CRM2011, what exact roles does he need to do this?

    Regards

    Wednesday, October 19, 2011 3:20 PM
  • Question
    Sign in to vote
    2
    Sign in to vote

    I just saw this error pop up during an installation. In my case I had given full permissions on the OU, but I had not made those permissions cascade to child objects - an easy one to overlook.

    In the AD object editor right click the OU in question, go to properties and then the security tab.

    Click on Advanced button near the bottom.

    In this screen select the user you want to give the permissions to and then click edit.

    You will have a drop down list enabling you to cascade the permissions given to the user to all child objects in the OU.

     

    For me this was set to "this object only" and so I did not have the permissions to add CRM service account to the sql access group created by the installation under the OU.

     

    Hope that makes sense !!!

    Paul Dowman, CRM Developer
    Friday, October 28, 2011 11:31 AM