Unfortunately the issue is not fixed yet.
This morning with the help of Gao and Chen we did the followings:
* Remove and rebuild the trusted connection
* Install on the CRM Server Beijing server the rollup 1 (among the
bugs that such a rollup fixes, there is exactly the one we have:
impossibility to add trusted domain users inside the CRM (http://
crmdynamo.com/2008/11/dynamics-crm-40-update-rollup-1-now-available-
for-download/))
* CRMSVR reboot
But none of them fixed the issue.
We also found out a note that says that the trusted users inside the
CRM could be added setting the following registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSCRM AutoGroupManagementOff to
value 1
And apparently that worked but it is not so. In fact that setting
allows us to create and save cl_bo users without errors, but it stops
the Microsoft Dynamics CRM automatically addition of the created user
accounts into the required Microsoft Dynamics CRM security groups.
This means that for example the created users are not able to refresh
a pivot table report created with the CRM as they do not have the
permission to see the CRM views. Therefore we set again that option to
value 0.
There is the possibility to add the accounts in such groups by hand,
so I please ask you:
1. to add the user Adomian\nicolai inside the AD groups: UserGroups
and ReportingGroups and inform us when this is done so that we can try
if the pivot table can be refreshed
Then we activated the trace inside the CRM to have more details on the
error we get adding users. I here attach the log file we got.
And looking into the network for people having the same log file, we
found out that: "When you install Microsoft Dynamics CRM in a Windows
2000 Mixed-mode domain, you cannot add users to Microsoft Dynamics CRM
that are located in a different domain" (
http://axforum.info/forums/
showthread.php?p=184424)
Therefore I please ask you:
2. Do you have a Windows 2000 Mixed mode domain?
Finally as at the beginning of January we will work with a Microsoft
consultant to fix the issue, we ask you:
3. To have an extechdomain domain administrative account without any
restriction, so to be able to work even if you are not in the office
直接copy出来,看看,或许有用