1. You need to add CRM URL to your Trusted Sites:
2. IIS does not authenticate you as the user that you think it should be authenticating you as.
This one can happen if for example one of your co-workers uses your machine and tries to access the CRM entering their domain login information, then later on their access to CRM is revoked, yet Internet Explorer has already cached their credentials and is trying to use it when you are logged in. The problem is that IIS does not show what Active Directory User it is trying to authenticate you as if you have the option checked to automatically verify your credentials on each visit. The quickest way to fix this is to:
- Do everything in item 1 above.
- With "Trusted Sites" icon selected, click on "Custom Level" button.
- Scroll all the way down to the "User Authentication" section, then check "Prompt for user name and password", clicking on OK.
- Click "OK" again to save settings and exit.
- Close Internet Explorer and Re-open, clearing all cache.
3. The Active Directory domain user you are logged in as does not have a CRM Account created for it.
Simply log in as the CRM Administrator, go under "Settings > Administration > User" and add the user to CRM.
Pete Soheil
DigiOz Multimedia
www.digioz.com
Hi
ReplyDeleteHow do you perform step 3 if you cant start Dynamics?
IE just displays - No Microsoft Dynamics CRM user exists with the specified domain name and user ID
TD
You will have to log out of your PC and Login as the Domain Administrator, then access the CRM as the CRM Administrator and give your regular user access.
ReplyDeleteHi
ReplyDeleteI can login as a domain admin, but (sorry to ask) can you be specific about what you mean by CRM Administrator? Who is this user, how do they get created, what AD member ship and rights do they have?
Thanks in advance
TD
The CRM Administrator is the AD user that you first used to install CRM with. After the initial installation you can also make other CRM Users an Administrator under the user management section.
DeleteHello, now to add user into CRM 2015 you need to go to Settings -->Security --> Users
ReplyDeleteHave fun.
Thanks for the update Simon!
ReplyDeleteHi Simon
ReplyDeleteGood summary, however the steps are not working as you might expect for one of our users hoping you could shed light on it? Essentially, he gets this error message all the time. The only way round it is for him to click "try again" and at that point presents credential login so he can login using the correct domain\username. Yet, for everyone else, they are always prompted to provide credentials when visiting the CRM application. This behaviour happens across both IE and Chrome for that user. Any thoughts on where else to look?
Hello Anonymous,
ReplyDeleteThis is definitely a user browser related issue. Compare the browser setting of the user's machine who is having issues with another users browser settings that is able to get in fine, and make sure under security and authentication all the settings match. Also, make sure to use Internet Explorer.
Thanks,
Pete
Thanks Pete, the weird thing is that the following day all was working fine without any changes in both IE and Chrome for that user. I should have mentioned the user was a new starter so is settings were identical to everyone else (we have strong group policy settings) applied to all machines on network. Cheers
ReplyDeleteSometimes it takes a day for all group policies to replicate across the network, especially for new users. It sounds like that's what the issue was here.
DeleteEither way, I am glad the issue was resolved.
Thanks,
Pete
Hello!
ReplyDeleteThank you for the solution, steps are working! I received this error for a few times and didn't know how to fix it, so that's my luck that I found your blog.
Thanks, have a nice day
Hello!
ReplyDeleteThanks for this article but I am a newbie..
As I saw that you are pretty complaisant I ask you about a basic question for all Dynmacis CRM admin..
My company has Microsoft Dynamics CRM 2015 Server (on-premise deployment).
I would like to know if it is really mandatory to pay a "CAL" for users who are present in AD (domain-users) ?
About 40 users should have access to CRM (financial service, marketing service, sales service, Etc.).
I am completly lost and I think this CAL way is a "financial ruin" so maybe I didn't correctly understand.. Hope so.
Thanks all :)