Last week i have had an issue where during the install of CRM 4, this is a fresh install the setup as follows:
SQL Box - Windows 2008 R2 + SQL2008 SP1
CRM Box - Windows 2008 R2
now both boxes have been freshly prepped and joined to the domain, all with out errors.
for added installation proof both servers had their windows firewalls turned off.
upon the Installation of CRM i encountered this error:
14:41:37| Error| System.Exception: Action Microsoft.Crm.Setup.Server.GrantConfigDBDatabaseAccessAction failed. ---> System.Data.SqlClient.SqlException: Windows NT user or group 'Domain\SQLAccessGroup {9e798758-54f6-44a6-93a6-51b6faf49928}' not found. Check the name again.
at Microsoft.Crm.Setup.Database.SharedDatabaseUtility.GrantDBAccess(String sqlServerName, String databaseName, String groupName, CrmDBConnectionType connectionType)
at Microsoft.Crm.Setup.Server.GrantConfigDBDatabaseAccessAction.Do(IDictionary parameters)
at Microsoft.Crm.Setup.Common.Action.ExecuteAction(Action action, IDictionary parameters, Boolean undo)
--- End of inner exception stack trace ---, Error, RetryCancel, Option1
Now its quite obvious at this stage that it is failing to Gannt Access to an account to the MSCRM_CONFIG Database on the SQL server.
so i tried to add the SQLAccessGroup manually in the SQL Management Tools and the Error 15401: Windows NT user or group 'SCDC2003\SQLAccessGroup {9e798758-54f6-44a6-93a6-51b6faf49928}' not found. Check the name again.
now this is strange as i could not add the account manually, So i thought is this just Group Related and tried add a domain user and the same problem reared it's ugly head.
so a call to the Microsoft Support Team and some tests later, after running:
name2sid.zip (13.04 kb)
via the command line:
name2sid.exe domain\anyuser
the real error appeared:
LookupAccountName failed with error: The trust relationship between this workstation and the primary domain failed. (0x6fd/1789)
Now this helps the Microsoft Guys a lot so they asked me run:
netdom resetpwd /server:<DomainControllerName> /userd:<domain\domainadminuser> /passwordd:<password>
This Command Replied with:
The machine account password for the local machine has been successfully reset.
The command completed successfully.
now the next thing to do is to put this new command into action by restarting the netlogon service:
net stop netlogon
net start netlogon
and clear the kerberos Tickets on the sql server:
klist purge
then i tried adding the group manually again and hey presto and shazzam, it was working.
i hope this helps others having similar problems.
Phil
Subscribe