Tuesday, May 31, 2011

CRM 2011 List Component does not work

I had a lot of trouble getting the list component to work on my Dev Machine, I eventually managed to fix the problem, so in the hope that this might help someone please try some of the following steps:
  • Ensure that CRM is running under a domain account with access to the sharepoint site where you plan to install the CRM List Component, see my other post
  • Try creating a new Sharepoint Web application
  • Install the List Component.WSP in the Sharepoint site. Go to site settings -> Galleries -> solutions. Activate the solution. This one was hard to solve. Try the following:
    • Ensure Sharepoint Foundation Sandboxed code service is running ( found user central admin -> System Settings -> Manage servies on the server.
    • In Manage Applications, select your application - select General Settings (ribbon), make sure that Browser file handling is set to permissive.
    • reset iis
    • if you get the error that user code service is too busy, restart the service and try again.
    • Finally and this one was the hardest, edit your hosts file located at system32\etc. add the following entry 127.0.0.1 crl.microsoft.com. I found the soluation here
That's all i can think of now. Good Luck!

Thursday, May 19, 2011

The user Id is invalid. at Microsoft.Crm.BusinessEntities

Make sure that the user which is running the application pool for the CRM application is added to the following groups
 PrivUserGroup
CRM_WPG
also make sure the account has access to sql server in sysadmin role

CRM 2011 Error Sandbox Host - Access Denied

Okay for those of you who have stumbled upon this issue when changing Dynamics CRM to run under a custom account then here is hte solution:
Your account should be a domain user account with the following permissions as recommended by Micrsoft:
  • Domain User membership.

  • That account must be granted the Logon as service permission in the Local Security Policy.

    • If you add the account as a member of local administrator then that should be sufficient.
  • Folder read and write permission on the \Trace, by default located under \Program Files\Microsoft  Dynamics CRM\Trace, and user account %AppData% folders on the local computer.

  • Read permission to the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSCRM subkey in the Windows Registry.

  • The service account may need an SPN for the URL used to access the Web site that is associated with it. To set the SPN for the Sandbox Processing Service account, run the following command at a command prompt on the computer where the service is running.
    SETSPN –a MSCRMSandboxService/<ComputerName> <service account>


  • If you want to change your Dynamics CRM web app to run under this account  then you will need to do some more stuff
  • The account should be in the sysadmin group of the SQL Server where your crm database is located.

  • The account should be in the SQLAccessAGroup

  • Add to CRM_WPG group

  • Add to PrivUserGroup (this is usually missed)


  • Hope this helps someone out there.