Grant Microsoft Dynamics GP Users Rights to Administer User Account & Access

We recently were working with a Dynamics GP client that has hundreds of users. They needed to give their IT department the ability to administer GP users and user access without giving them the DYNSA password. We found no documentation on how to accomplish this. So by trial and error we came up with a solution:

IN DYNAMICS GP (login as 'sa'):
Created new Security Task: ADMIN_SYSTEM_USER
Gave the Task access to:
Category: System
Product: Microsoft Dynamics
Type: Windows
Series: System
- Activity Tracking Setup
- Alternate/Modified Forms and Reports
- Remove Security Setup Records
- User Access Setup
- User Class Setup
- User Security Setup
- User Setup

Created new Security Role: USER_ADMIN and added DEFAULT and ADMIN_SYSTEM_USER tasks to it.

Added Role to users security in GP

From Security:
Added the following roles to SQL user accounts

Added the following mapping to the SQL User accounts for all GP DBs .

Dynamics GP DYNSA cannot grant users access to companies or company

We recently had an issue where DYNSA could not grant users access to companies. The User Access Screen would not allow DYNSA to check or uncheck access to any company. We found that DYNSA was not the owner of one of the company databases.

Make sure DYNSA is the owner of the DYNAMICS system database and all Company databases. Run:
EXEC sp_changedbowner 'DYNSA'
against EACH GP database.

Script Error - cannot find the file specified

Great Plains script error

You are getting a script error pop-up when clicking on links in Great Plains

“An error has occurred in the script on this page”

“The system cannot find the file specified”














This is occurring mainly because you are using re-directed folders in your user profiles. GP and Dynamics will try use Internet Explorer, which is trying to write to a folder under UserData. If the user logged in and had the folder redirected before launching IE, it will never create the folder in the remote location.

The quick fix is to create the folder manually, in the redirected location. IE can now write its temp files and GP and Dynamics function correctly.

Since this will happen to every new user, I have created a logon script which populates the UserData folder automatically.

Please see this msdn blog entry with specific details on the issue, and example resolutions.

CRM 2011 Prompts for Credentials then gives 401 error.

The following is from

The Fix

Basically the certificate automatically rolls over to a new one and ADFS won’t authenticate any more. Here are the steps that seem to fix this issue:

  1. Open windows Powershell as administrator (right click runas)image
  2. Run the following commands:
  3. add-pssnapin Microsoft.adfs.powershell
  4. set-adfsproperties -autocertificaterollover $true
  5. update-adfscertificate -urgent
  6. Run the CRM deployment manager
  7. Run through Configure Claims-Based Authentication Wizard (no changes)
  8. Run through Configure Internet-Facing Deployment Wizard (no changes)
  9. Restart the adfs service
    From a Command Prompt “cmd” Type
    net stop adfssrv
    start adfssrv
  10. Restart the Microsoft Asynchronous processing service
    From Services Windows
    Click the Restart Icon while the Service is selected
  11. run an iisreset from the elevated command prompt
    Start RUN “cmd”

CRM 4.0 Report To PDF Converter Workflow hangs - emails not sending attachments

While making changes to a custom report for Microsoft Dynamics CRM 4.0 we found the changes weren't being applied to reports used by the Microsoft Dynamics CRM 4.0 Report To PDF Converter. After investigation we discovered that the Report to PDF Converter was looking in the Report Server virtual directory /crmorg_MSCRM/.  The reports for CRM 4.0 are actually in /crmorg_MSCRM/4.0.  But the names of the reports are GUIDs so it is hard to figure out which report to set up int the Report To PDF configurations.  So the original consultant and republished the reports in the  organization root.  

No problem.  We opened up IE and browsed to the Report Manager page and uploaded the new .RDL file to the /crmorg_MSCRM/ folder.

Problem - after we published the new verision of the report Workflows in CRM started hanging in the Waiting state and the emails they created were hung in draft status reason with no attachment.  We forgot that when you upload a custom report to CRM the report is modified to include the parameters that allow it to be run for all records, a group of records or just a single record.  The workflow and associated email were getting hung up because the report CRM 4.0 Report To PDF Converter was running a report with no parameters.

Fix - In IE we browsed to the Report Manager /crmorg_MSCRM/4.0 folder, opened the properties for the appropriate report, clicked edit and saved the report to a temporary location.  Then we brosed back to the /crmorg_MSCRM folder and opened the properties for the report the PDF Converter was configured to use and uploaded the version we just saved.

Syndicate content