locked
The user name or password is incorrect in the CRM system checks during installation RRS feed

  • Question

  • Hi everyone

    I'm installing CRM 2013 on 2 servers (server 2012) - CRM Full server + SQL Server 2012.

    I created 2 service accounts for this - CRMSVC + CRMSANDBOX (one for sandbox and another one for all the rest).

    I'm getting the following error in the system checks during setup:

    I've verified a billion times that the service accounts and passwords are valid - I even tried using different service accounts - same problem. As for now I also added the service accounts to the local admins groups just to be sure that it's not some permissions issue (I also added them to the 'log on as service' & performance logs groups). 

    If i try to use NETWORK SERVICES instead of a service account - the installation goes through flawlessly - no issues at all.

    I'm also gonna say that i tried another installation on a fresh server - SAME ISSUE.

    So for now my ideas are either it's a GPO somehow blocking the service accounts - or some kind of other security issue.

    I also found out that the security event log shows these two errors when these show up in the system checks:

    Inside i found 'NULL SID' entry - it does not recognize the service accounts account and 0xC0000064 in the Sub Status Codes

    It's not a typo issue so don't bother - if i write a wrong password in purpose - it actually says that the password i typed for domain\service account is incorrect - here it seems that the service account is not being recognized.

    Any ideas anyone?

    Thanks


    Please vote if you find my post helpful - Thanks


    • Edited by TZ00KI Thursday, August 21, 2014 12:18 PM
    Thursday, August 21, 2014 12:17 PM

Answers

  • Thanks for all the replies - Like I said this was not an AD issue

    I still don't know why this happens but i was able to workaround this issue using the IgnoreChecks registry entry as ssen in this KB:

    http://support.microsoft.com/kb/974584   (Just the first step)

    So what i did was:

    1. Install with NETWORK SERVICES ->

    2. After successful installation added the registry entry

    3. Repair installation switching to the service accounts - and voila! Installation went through

    I guess it proves that this is some kind of weird bug in the setup combined with something in this environemt

    Hope this helps someone in the future

    Michael 



    Please vote if you find my post helpful - Thanks


    • Marked as answer by TZ00KI Sunday, August 24, 2014 7:54 AM
    • Edited by TZ00KI Sunday, August 24, 2014 7:54 AM
    Sunday, August 24, 2014 7:53 AM

All replies

  • Does the account that you are using to install CRM have access to read the service account AD objects ?

    Microsoft CRM MVP - http://mscrmuk.blogspot.com/ http://www.excitation.co.uk

    Thursday, August 21, 2014 3:21 PM
    Moderator
  • Yes - This is not an issue with the AD Organization Unit for sure - As I said with NETWORK SERVICES - the installation works fine, also you can see that the Active Directory check is green.

    The user accessing the OU during the installation is the installing user himself - and not the service accounts - if that was the issue then the setup wouldn't go through with NETWORK SERVICES as well...

    Thanks


    Please vote if you find my post helpful - Thanks


    • Edited by TZ00KI Thursday, August 21, 2014 4:37 PM
    Thursday, August 21, 2014 4:36 PM
  • Not sure you understood my point.

    The installation process necessarily runs under the account of the installing user. The installation will query AD to identify information about the service accounts, and will add them to the relevant CRM AD groups. It is possible that the installing user account does not have sufficient privileges on the AD objects for the service accounts to be able to identify them, and to add them to groups. This scenario is consistent with the errors that you get, and also with being able to install CRM to run under NetworkServices (which doesn't have its own AD object)


    Microsoft CRM MVP - http://mscrmuk.blogspot.com/ http://www.excitation.co.uk

    Friday, August 22, 2014 7:53 AM
    Moderator
  • Hi, What we do at our organization is to pre-create the CRM ad groups and use xml configuration to do the installs. Please check if currently logged in user does have permission to create and add users into the ad groups. Like David said, it seems more like a permission issue. I hope you have only one pdc and your installing id and service id are in same domain 😊 Regards. Jithesh
    Friday, August 22, 2014 9:07 AM
  • Thanks for all the replies - Like I said this was not an AD issue

    I still don't know why this happens but i was able to workaround this issue using the IgnoreChecks registry entry as ssen in this KB:

    http://support.microsoft.com/kb/974584   (Just the first step)

    So what i did was:

    1. Install with NETWORK SERVICES ->

    2. After successful installation added the registry entry

    3. Repair installation switching to the service accounts - and voila! Installation went through

    I guess it proves that this is some kind of weird bug in the setup combined with something in this environemt

    Hope this helps someone in the future

    Michael 



    Please vote if you find my post helpful - Thanks


    • Marked as answer by TZ00KI Sunday, August 24, 2014 7:54 AM
    • Edited by TZ00KI Sunday, August 24, 2014 7:54 AM
    Sunday, August 24, 2014 7:53 AM
  • Not sure you understood my point.

    The installation process necessarily runs under the account of the installing user. The installation will query AD to identify information about the service accounts, and will add them to the relevant CRM AD groups. It is possible that the installing user account does not have sufficient privileges on the AD objects for the service accounts to be able to identify them, and to add them to groups. This scenario is consistent with the errors that you get, and also with being able to install CRM to run under NetworkServices (which doesn't have its own AD object)


    Microsoft CRM MVP - http://mscrmuk.blogspot.com/ http://www.excitation.co.uk

    Hi David

    I understand this, but as far as i know running it under NETWORK SERVICES will add the machine names to the OU security groups - hence the user installing still needs to have delegated permissions on that OU. Anyway as mentioned above - ignoring the checks and running the installation solved this and also added the accounts to the security groups - so this whole mess looks like some bug to me - not sure i will ever find out what it was :)


    Please vote if you find my post helpful - Thanks

    Sunday, August 24, 2014 8:52 AM
  • We ran into the same error you encountered.  The problem in our case was that the service accounts were in a different OU on the AD server than the OU we selected.  Once we put the service accounts in the correct OU the errors went away.

    Rayan

    Monday, December 29, 2014 3:41 PM
  • Just to add to this I ran into the exact same problem. Fortunately I also had access to a domain admin account and was able to run the setup using my install account and domain admin to see the difference. Basically when I ran as my install account I got the error if I ran as domain admin the error was reported as my service accounts not being added to the Performance Log group on the local machine. So it seems as though the install account didn't have access to check the local groups on the server even though it was part of an AD Group that was part of the local admin group on the server. I didn't have time to dig deeper to find out exactly what was the problem but hopefully this helps someone else out later. 
    Tuesday, November 1, 2016 10:34 AM