Answered by:
microsoft.crm.setup.server.addaspnetserviceaccounttosqlaccessgroupaction failed. Access is denied

Question
-
Hmm any idea what setup is trying to do here
microsoft.crm.setup.server.addaspnetserviceaccounttosqlaccessgroupaction failed. Access is denied
SW
Friday, April 1, 2011 10:17 AM
Answers
-
I expect this is when the setup program is attempting to add an account (the identity of the CrmAppPool, which the the CRM service account specified during setup), to the Active Directory group SqlAccessGroup. It looks the the account you're running setup under does not have AD permissions to add users to this group
Microsoft CRM MVP - http://mscrmuk.blogspot.com http://www.excitation.co.uk- Marked as answer by Seb SW Thursday, April 14, 2011 12:16 PM
Friday, April 1, 2011 3:25 PMModerator
All replies
-
I expect this is when the setup program is attempting to add an account (the identity of the CrmAppPool, which the the CRM service account specified during setup), to the Active Directory group SqlAccessGroup. It looks the the account you're running setup under does not have AD permissions to add users to this group
Microsoft CRM MVP - http://mscrmuk.blogspot.com http://www.excitation.co.uk- Marked as answer by Seb SW Thursday, April 14, 2011 12:16 PM
Friday, April 1, 2011 3:25 PMModerator -
Hi David,
we have the same problem here, but the user has the proper permissions in the OU and group to add users (full access).
Do you have any hint?
Greetings
StefanTuesday, May 3, 2011 3:11 PM -
Stefan
If you're sure the setup user has the right AD permissions to the OU and groups, then I'd check if you have any AD replication problems
David
Microsoft CRM MVP - http://mscrmuk.blogspot.com http://www.excitation.co.uk- Edited by DavidJennawayMVP, Moderator Wednesday, May 4, 2011 9:37 AM
Wednesday, May 4, 2011 9:34 AMModerator -
You were right, the user hadn't the proper permissions in the CRM groups.
Thank you!
Wednesday, May 4, 2011 9:36 AM -
Hi David
I have the same problem... On the user that is installing CRM2011, what exact roles does he need to do this?
Regards
Wednesday, October 19, 2011 3:20 PM -
I just saw this error pop up during an installation. In my case I had given full permissions on the OU, but I had not made those permissions cascade to child objects - an easy one to overlook.
In the AD object editor right click the OU in question, go to properties and then the security tab.
Click on Advanced button near the bottom.
In this screen select the user you want to give the permissions to and then click edit.
You will have a drop down list enabling you to cascade the permissions given to the user to all child objects in the OU.
For me this was set to "this object only" and so I did not have the permissions to add CRM service account to the sql access group created by the installation under the OU.
Hope that makes sense !!!
Paul Dowman, CRM DeveloperFriday, October 28, 2011 11:31 AM