locked
CRM 2011 for Outlook: There is a problem communicating with the Microsoft Dynamics CRM server RRS feed

  • Question

  • Trying to perform initial setup/configuration of CRM 2011 for Outlook. After entering the URL (<http://<hostname>:<port>>) and testing the connection is receive the following error: "There is a problem communicating with the Microsoft Dynamics CRM server.".

    The local log files contain the following messages:

    1. SecurityNegotiationException: The caller was not authenticated by the service.
    2. FaultException: The request for a security token could not be satisfied because authentication failed.

     

    The CRM server is HTTP (not HTTPS, not IFD). The web application (IE) is fully accessible. All software is fully updated.

    Friday, May 13, 2011 10:42 PM

Answers

  • Here is my conclusion. Outlook will connect to CRM 2011 only in one of the following scenarios:

    • When running from a computer that is domain member.
    • When connecting to a Internet-facing deployment.

    • Marked as answer by passenger19 Wednesday, June 1, 2011 7:13 PM
    Wednesday, June 1, 2011 7:13 PM
  • Here is my conclusion. Outlook will connect to CRM 2011 only in one of the following scenarios:

    • When running from a computer that is domain member.
    • When connecting to a Internet-facing deployment.

    Hi David,

    I am not sure about the first point, but i am not convinced with the second point.

    I can sucessfully connect to the CRM 2011 AD on premise server from my outlook. Here are the steps i have done

    1. Installed CRM 2011 server in windows server 2008
    2. Updated the webaddress with https binding in deployment manager in the server.
    3. Created a self signed certificate (Testing).
    4. Exported the certificate as .pfx file and imported in to my local computer (client) certificate store.
    5. Access the crm website from internet explorer and provide the credentials(windows authentication)
    6. Open the internet explorer settings and allow the internet explorer to auto save the credentials so that when you login next time it won't ask for the credentials.
    7. Also add the website ipaddress in to the trusted sites.
    8. Now i tried to connect from the outlook crm by giving the url as https://x.y.z
    9. Now the connection was successfull.

    vinay kasireddy

    Thursday, June 2, 2011 1:39 PM

All replies

  • Hi David,

    Below  are few suggestions to try-out,

    • Could you try appending the OrgName in URL (Ex: http://OrgName.servername:port)
    • Try running your outlook client diagnostics and see if it helps you autofix things.

    Cheers, Francis Edwin

    Follow me on: https://twitter.com/astutecrm

    My Blog: http://astutecrm.wordpress.com/

     

    Saturday, May 14, 2011 8:35 AM
  • This is the on-premise version. The domain name wouldn't resolve. (http://OrgName.servername:port)

    When I open the Diagnostics tool there is no "Run Diagnostics" button.

    Saturday, May 14, 2011 6:30 PM
  • David,

    Below are the support articles which points to the same problem and suggests some possible resolutions,

    http://support.microsoft.com/kb/2502671

    http://support.microsoft.com/kb/910090

    http://www.powerobjects.com/blog/2011/03/04/there-is-a-problem-communicating-with-the-microsoft-dynamics-crm-server/

    Hope any one of these should help you fix this issue

    Let us know with the results!


    Cheers, Francis Edwin

    Follow me on: https://twitter.com/astutecrm

    My Blog: http://astutecrm.wordpress.com/

     

    Sunday, May 15, 2011 6:21 AM
  • Unfortunately I have taking taken those articles into consideration. Still nothing.

    Another interesting factor is that another party, who is operating Outlook from within the private network the CRM runs on, is able to connect.

    Sunday, May 15, 2011 6:26 AM
  • David,

    Are you trying to connect the CRM server over VPN?

    Also, what is your client operating system?


    Cheers, Francis Edwin

    Follow me on: https://twitter.com/astutecrm

    My Blog: http://astutecrm.wordpress.com/

     

    Sunday, May 15, 2011 6:31 AM
  • The web service has a public IP address and functions fully within IE without a VPN connection.

    I have tried connecting Outlook with and without a VPN connection. All attempts have failed.

    I am wondering if maybe the problem is because my computer is not part of the same domain.

    I am using Windows 7 x64.

    Sunday, May 15, 2011 6:40 AM
  • The system in question should be a part of the same domain as of the CRM server to be accessed!

    Cheers, Francis Edwin

    Follow me on: https://twitter.com/astutecrm

    My Blog: http://astutecrm.wordpress.com/

     

    Sunday, May 15, 2011 6:44 AM
  • It was my assumption that since IE can access CRM without my computer being a domain member that the same would apply to Outlook. Is this not correct?
    Sunday, May 15, 2011 6:48 AM
  • It was my assumption that since IE can access CRM without my computer being a domain member that the same would apply to Outlook. Is this not correct?

    IE can access CRM without the computer being on the domain only when your CRM is an IFD (Internet Facing Deployment)!

    If that is the case - while configuring CRM outlook client - select the option CRM online instead of On-Premise and input the same URL which you use for the web client (IE) and that should work.


    Cheers, Francis Edwin

    Follow me on: https://twitter.com/astutecrm

    My Blog: http://astutecrm.wordpress.com/ 

    Sunday, May 15, 2011 7:00 AM
  • Interestingly enough the deployment is NOT yet setup as IFD, and still works. Perhaps Outlook is not as lenient.

    Once the switch is made to IFD I will update this post.

    Sunday, May 15, 2011 7:04 AM
  • Following this thread since I am having the same problem. I am VPN'ing to the domain, but the computer I am on is not part of the domain , but I have also tried from a PC that is on the domain (connected through VPN) and I get the same error (inlcuding the log). (I do not have IFD set up)

    David, are you saying you did get the client to connect?

    and Edwin, you say to enter the Online option and enter the URL, which is not possible. (I am able to select the CRM online option and I do get the LIve login but you cannot enter a URL at that point)?

    Monday, May 16, 2011 2:32 PM
  • CRM Online is for exactly that - CRM Online (not a third-party IFD).

    I can't get Outlook to even connect to the CRM server.

    However, somebody else who's computer is part of the domain (and not on a VPN) can connect.

    Monday, May 16, 2011 3:20 PM
  • I am also getting an issue similar to this.  On-Premise with IFD.  Browser access works both VPN'd in and not.  Outlook can connect and after entering the domain credentials, does display the list of available organizations...  suggest the discovery service is able to connect OK.  However, after selecting the organization and hitting OK, I get the dreaded "There is a problem communicating with the Microsoft Dynamics CRM server..." message.

    Another system which is in the same domain as the server (my client is not), can install and configure the CRM client sucessfully.

    I'm running Outlook 2010 (32-bit).

    Is there a log or some other type of trace information that can be looked at to try and determine what's going wrong here.  Couldn't see anything in the event log.

     


    LSM
    Wednesday, May 18, 2011 3:57 PM
  • Here is my conclusion. Outlook will connect to CRM 2011 only in one of the following scenarios:

    • When running from a computer that is domain member.
    • When connecting to a Internet-facing deployment.

    • Marked as answer by passenger19 Wednesday, June 1, 2011 7:13 PM
    Wednesday, June 1, 2011 7:13 PM
  • Here is my conclusion. Outlook will connect to CRM 2011 only in one of the following scenarios:

    • When running from a computer that is domain member.
    • When connecting to a Internet-facing deployment.

    Hi David,

    I am not sure about the first point, but i am not convinced with the second point.

    I can sucessfully connect to the CRM 2011 AD on premise server from my outlook. Here are the steps i have done

    1. Installed CRM 2011 server in windows server 2008
    2. Updated the webaddress with https binding in deployment manager in the server.
    3. Created a self signed certificate (Testing).
    4. Exported the certificate as .pfx file and imported in to my local computer (client) certificate store.
    5. Access the crm website from internet explorer and provide the credentials(windows authentication)
    6. Open the internet explorer settings and allow the internet explorer to auto save the credentials so that when you login next time it won't ask for the credentials.
    7. Also add the website ipaddress in to the trusted sites.
    8. Now i tried to connect from the outlook crm by giving the url as https://x.y.z
    9. Now the connection was successfull.

    vinay kasireddy

    Thursday, June 2, 2011 1:39 PM
  • Ah. Yes. Good point. Sorry, that is not a scenario I had considered (exporting the certificate and adding to your store). Good job!
    Thursday, June 2, 2011 1:42 PM
  • Make sure your workstation clock and the CRM server clocks are not off by more than 5 minutes.  If/when you configure Claims-based Authentication for an IFD deployment, make sure the STS server (if it is seperate from the CRM server) is also in synch.

    I had a similar problem and fixed it by synching the clocks.

    Friday, June 3, 2011 11:15 PM
  • Hi All,

    I am getting the following error when I try to connect using https

    19:18:50|  Error| Error connecting to URL: https://mycrm.org.com/XRMServices/2011/Discovery.svc Exception: System.InvalidOperationException: Metadata contains a reference that cannot be resolved: 'https://mycrm.org.com/XRMServices/2011/Discovery.svc?wsdl'. ---> System.Net.WebException: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. ---> System.Security.Authentication.AuthenticationException: The remote certificate is invalid according to the validation procedure.
       at System.Net.Security.SslState.StartSendAuthResetSignal(ProtocolToken message, AsyncProtocolRequest asyncRequest, Exception exception)
       at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
       at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest)
       at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
       at System.Net.Security.SslState.StartReadFrame(Byte[] buffer, Int32 readBytes, AsyncProtocolRequest asyncRequest)
       at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
       at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
       at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest)
       at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
       at System.Net.Security.SslState.StartReadFrame(Byte[] buffer, Int32 readBytes, AsyncProtocolRequest asyncRequest)
       at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
       at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
       at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest)
       at System.Net.Security.SslState.ProcessReceivedBlob(Byte[] buffer, Int32 count, AsyncProtocolRequest asyncRequest)
       at System.Net.Security.SslState.StartReadFrame(Byte[] buffer, Int32 readBytes, AsyncProtocolRequest asyncRequest)
       at System.Net.Security.SslState.StartReceiveBlob(Byte[] buffer, AsyncProtocolRequest asyncRequest)
       at System.Net.Security.SslState.CheckCompletionBeforeNextReceive(ProtocolToken message, AsyncProtocolRequest asyncRequest)
       at System.Net.Security.SslState.StartSendBlob(Byte[] incoming, Int32 count, AsyncProtocolRequest asyncRequest)
       at System.Net.Security.SslState.ForceAuthentication(Boolean receiveFirst, Byte[] buffer, AsyncProtocolRequest asyncRequest)
       at System.Net.Security.SslState.ProcessAuthentication(LazyAsyncResult lazyResult)
       at System.Net.TlsStream.CallProcessAuthentication(Object state)
       at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean ignoreSyncCtx)
       at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)
       at System.Net.TlsStream.ProcessAuthentication(LazyAsyncResult result)
       at System.Net.TlsStream.Write(Byte[] buffer, Int32 offset, Int32 size)
       at System.Net.PooledStream.Write(Byte[] buffer, Int32 offset, Int32 size)
       at System.Net.ConnectStream.WriteHeaders(Boolean async)
       --- End of inner exception stack trace ---
       at System.Net.HttpWebRequest.GetResponse()
       at System.ServiceModel.Description.MetadataExchangeClient.MetadataLocationRetriever.DownloadMetadata(TimeoutHelper timeoutHelper)
       at System.ServiceModel.Description.MetadataExchangeClient.MetadataRetriever.Retrieve(TimeoutHelper timeoutHelper)
       --- End of inner exception stack trace ---
       at System.ServiceModel.Description.MetadataExchangeClient.MetadataRetriever.Retrieve(TimeoutHelper timeoutHelper)
       at System.ServiceModel.Description.MetadataExchangeClient.ResolveNext(ResolveCallState resolveCallState)
       at System.ServiceModel.Description.MetadataExchangeClient.GetMetadata(MetadataRetriever retriever)
       at System.ServiceModel.Description.MetadataExchangeClient.GetMetadata(Uri address, MetadataExchangeClientMode mode)
       at Microsoft.Xrm.Sdk.Client.ServiceMetadataUtility.RetrieveServiceEndpoints(Type contractType, Uri serviceUri)
       at Microsoft.Xrm.Sdk.Client.ServiceConfiguration`1..ctor(Uri serviceUri)
       at Microsoft.Xrm.Sdk.Client.ServiceConfigurationFactory.CreateConfiguration[TService](Uri serviceUri)
       at Microsoft.Crm.Outlook.ClientAuth.ClientAuthProvidersFactory`1.GetAuthProvider(Uri endPoint, Credential credentials, AuthUIMode uiMode, Uri webEndPoint, IClientOrganizationContext context, Form parentWindow)
       at Microsoft.Crm.Application.Outlook.Config.DeploymentsInfo.DeploymentInfo.LoadOrganizations(AuthUIMode uiMode, Form parentWindow)
       at Microsoft.Crm.Application.Outlook.Config.DeploymentsInfo.LoadOrganizations(AuthUIMode uiMode, Form parentWindow)

    Error| Exception : The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.    at System.Net.HttpWebRequest.GetResponse()
       at System.ServiceModel.Description.MetadataExchangeClient.MetadataLocationRetriever.DownloadMetadata(TimeoutHelper timeoutHelper)
       at System.ServiceModel.Description.MetadataExchangeClient.MetadataRetriever.Retrieve(TimeoutHelper timeoutHelper)

    @Vinay: I tried your solution of saving the certificate and then trying to use but still getting this error. Is there something that I am missing? Please help as now it has become way to complicated.

    Friday, July 22, 2011 10:42 AM
  • Check the clocks. I didn't believe it myself until I checked the clocks. If this does not fix your problem, you're only out the minimal time it takes to look.
    Friday, July 22, 2011 5:34 PM
  • David: ADFS is not setup. But the url works in the browser. Its only the problem with CRM in Outlook.
    https://mycrm.org.com/XRMServices/2011/Discovery.svc

    hgjg: Clocks are set to the same time. Thanks for replying.

    When I hit this url in the browser it works but before it can give the actual reply it asks me whether to continue to the website or not. If i click on continue only then it gives me the reply. I guess this is an issue with the certificate.

    I posted this hear as Vinay who came up with some steps also did not setup IFD. Is it necessary to have an IFD Deployment for using CRM in Outlook? I have also started a new thread: http://social.microsoft.com/Forums/en/crm/thread/c17cfe0a-ee41-473a-ba19-1bb2d182c53c

    Frank replied to me saying I need IFD but here in this thread Vinay has come up with some other solution so I was just checking if there is an alternative way out.

    Anyways, Sorry David to post the same question over here.

    Sunday, July 24, 2011 5:17 AM
  • Hi CRM Rocks,

    Do not configure both http and https, just configure only https for website. (5th step from the below link)

    Please follow the steps from below link (more detailed info on where to import the certificate file) properly

    http://social.microsoft.com/Forums/en-US/crmdeployment/thread/8ecb2bb7-55f0-41c3-b99d-af6bda2ca656/#f093452c-ed0d-4fc4-9fad-3b72c454be10

    Note: I have n't used IFD setup in my case. It is only the matter of how you setup. Pls follow the 6th step and 8th step very carefully. 

    For the 8th step. Exit from outlook. Clear the history and cahe(IE). Before connecting from CRM outlook, you need to access the url from internet explorer and store the credentials(windows authentication). I think outlook depends on internet explorer  to access the web service and i think it is right (otherwise everybody will access the same webservice without entering any credentials)

    For the 6th step, since we are using self signed certificate, we may need to import the certificate manually in to the client's certificate store to trust them.

    My system configuration

     

    Server:

    1. Windows server 2008 r2 enterprise edition

    2. Active Directory On Premise

    Client:

    1. Windows Vista/Windows 7

    2. Windows outlook 2007/2010



    Tuesday, July 26, 2011 2:49 AM
  • Hi all,

    I am having the exact same issue as mentioned above when trying to connect to CRM through Outlook - "There is a problem communicating with the Microsoft Dynamics CRM server. The server might be unavailable. Try again later. If the problem persists, contact your system administrator".

     

    CRM 2011 Win 2008 Standard R2

    Client - Windows 7 | Outlook Version 14 (Part of Office Pro Plus 2010)

    I can access the portal via IE

     

    It is not an IFD. I have added a number of users, and given permissions. I have tried creating a self-signed cert and set the bindings through SSL - therefore I have tried both http:// and https://, both have been fine through the browser. I have also checked the time settings but this is not the issue.

     

    Any help would be much appreciated. Thanks

    Monday, January 30, 2012 4:26 PM
  • David,

    I could manage to set up CRM Outlook Client completely outside the domain just by storing the credentials first in Windows Credentials (either manually or accessing CRM Web and saving the credentials).

    I'm still not sure if this is a supported method or not but it worked for me several times (sometimes not, leaving some doubts to me but maybe the reason could be other than credentials).

     

    Hope it helps,

    PP


    Microsoft MVP Dynamics CRM | My Twitter: http://twitter.com/pabloperalta | My blog: http://weblogs.asp.net/pabloperalta | Blog en Español: http://wwww.elblogdedynamicscrm.com
    Monday, February 6, 2012 10:47 AM
  • This RESOLOVED the issue for me

     - Assign an ADMIN level security role to the User prior to Config from Outlook client.

     - Remove Admin Role when done, tested, all good.

    CRM 2011 RU5/6, on Premise, Office 2010

    Cheers.

    Thursday, February 23, 2012 7:10 PM
  • Same error to.

    Create a user on CRM with same name an password on server an CRM.

    And then configure the outlook 2010 client, on the computer not int he domain of the crm.

    Works fine.

    Friday, April 13, 2012 11:33 PM
  • Hi,

    seems that Win 8 has a Windows Credentials store, which make CRM for Outlook work as non domain member computer

    to Control Panel – Credentials Manager – Windows Credentials

    Thursday, July 4, 2013 5:42 PM