locked
CRM 2011 IFD ADFS Could not obtain information about Windows NT group/user RRS feed

  • Question

  • Hello Friends,

    I have a strange problem with CRM 2011 IFD which I recently configured. CRM is accessible using the same url internally but when I use the url externally, it comes up with adfs error message ( See attached file).  The ADFS 2.0 is installed on the separate server to CRM server.  I have tried all sorts of fixes but still its the same problem. The strange this is that it works fine internally with the same url  such as (https://eecrm.domain.ac.uk). 

    On ADFS server, it logs two events on event viewer every minute as below

    The description for Event ID 28005 from source MSSQL$MICROSOFT##SSEE cannot be found. Either the component that raises this event is not installed on your local computer or the installation is corrupted. You can install or repair the component on the local computer.

    If the event originated on another computer, the display information had to be saved with the event.

    The following information was included with the event: 

    15404
    19
    Could not obtain information about Windows NT group/user 'domainname\username', error code 0x5.

    The specified resource type cannot be found in the image file
    An account failed to log on.

    Subject:
     Security ID:  NETWORK SERVICE
     Account Name:  servername$
     Account Domain: Domainname
     Logon ID:  0x3e4

    Logon Type:   3

    Account For Which Logon Failed:
     Security ID:  NULL SID
     Account Name:  
     Account Domain:  

    Failure Information:
     Failure Reason:  Unknown user name or bad password.
     Status:   0xc000006d
     Sub Status:  0xc0000064

    Process Information:
     Caller Process ID: 0x660
     Caller Process Name: C:\Windows\SYSMSI\SSEE\MSSQL.2005\MSSQL\Binn\sqlservr.exe

    Network Information:
     Workstation Name: KL-ADFS2-1
     Source Network Address: -
     Source Port:  -

    Detailed Authentication Information:
     Logon Process:  Authz   
     Authentication Package: Kerberos
     Transited Services: -
     Package Name (NTLM only): -
     Key Length:  0

    I would really appreciate any help in this matter. 

    Thanks a lot

    Nemath


    Nemath

    Tuesday, August 5, 2014 2:48 PM