locked
microsoft.crm.setup.server.addaspnetserviceaccounttosqlaccessgroupaction failed. Access is denied RRS feed

  • Question

  • Hmm any idea what setup is trying to do here

    microsoft.crm.setup.server.addaspnetserviceaccounttosqlaccessgroupaction failed. Access is denied

     

    SW

    Friday, April 1, 2011 10:17 AM

Answers

  • I expect this is when the setup program is attempting to add an account (the identity of the CrmAppPool, which the the CRM service account specified during setup), to the Active Directory group SqlAccessGroup. It looks the the account you're running setup under does not have AD permissions to add users to this group


    Microsoft CRM MVP - http://mscrmuk.blogspot.com  http://www.excitation.co.uk
    • Marked as answer by Seb SW Thursday, April 14, 2011 12:16 PM
    Friday, April 1, 2011 3:25 PM
    Moderator

All replies

  • I expect this is when the setup program is attempting to add an account (the identity of the CrmAppPool, which the the CRM service account specified during setup), to the Active Directory group SqlAccessGroup. It looks the the account you're running setup under does not have AD permissions to add users to this group


    Microsoft CRM MVP - http://mscrmuk.blogspot.com  http://www.excitation.co.uk
    • Marked as answer by Seb SW Thursday, April 14, 2011 12:16 PM
    Friday, April 1, 2011 3:25 PM
    Moderator
  • Hi David,

    we have the same problem here, but the user has the proper permissions in the OU and group to add users (full access).

    Do you have any hint?

    Greetings
    Stefan

    Tuesday, May 3, 2011 3:11 PM
  • Stefan

    If you're sure the setup user has the right AD permissions to the OU and groups, then I'd check if you have any AD replication problems

    David


    Microsoft CRM MVP - http://mscrmuk.blogspot.com  http://www.excitation.co.uk
    Wednesday, May 4, 2011 9:34 AM
    Moderator
  • You were right, the user hadn't the proper permissions in the CRM groups.

    Thank you!

    Wednesday, May 4, 2011 9:36 AM
  • Hi David

    I have the same problem... On the user that is installing CRM2011, what exact roles does he need to do this?

    Regards

    Wednesday, October 19, 2011 3:20 PM
  • I just saw this error pop up during an installation. In my case I had given full permissions on the OU, but I had not made those permissions cascade to child objects - an easy one to overlook.

    In the AD object editor right click the OU in question, go to properties and then the security tab.

    Click on Advanced button near the bottom.

    In this screen select the user you want to give the permissions to and then click edit.

    You will have a drop down list enabling you to cascade the permissions given to the user to all child objects in the OU.

     

    For me this was set to "this object only" and so I did not have the permissions to add CRM service account to the sql access group created by the installation under the OU.

     

    Hope that makes sense !!!


    Paul Dowman, CRM Developer
    Friday, October 28, 2011 11:31 AM