404 Error for Isolated Users in Dynamics CRM

I had an issue recently where one user was getting a 404 error when trying to log into CRM. While troubleshooting this issues I tried everything I could think of, including disabling Local Security Authority (LSA) credential caching on the ADFS server, recreating the user's Active Directory account, disabled/re-enabled her CRM account, purged her kerberos tickets, deleted her cookies, killed her ADFS sessions, rebooted servers, reset passwords, checked her security roles, etc. After trying every perceivable resolution, this is what I had to do to fix the issue.

Resolution: Errors After Installing Update Rollup for Dynamics CRM 2011

After installing an update rollup for Dynamics CRM 2011 ( I was installing UR12, but others have gotten the same error with outher URs), I started getting this error.


Log Name: Application Source: ASP.NET 4.0.30319.0 Date: 3/28/2013 8:40:04 AM Event ID: 1309 Task Category: Web Event Level: Warning Keywords: Classic User: N/A Computer: crm_server.domain.local Description: Event code: 3005 Event message: An unhandled exception has occurred. Event time: 3/28/2013 8:40:04 AM Event time (UTC): 3/28/2013 1:40:04 PM Event ID: 857c1ec3a88c43799878637451e1b3a7 Event sequence: 36389 Event occurrence: 23 Event detail code: 0 Application information: Application domain: /LM/W3SVC/1/ROOT-1-140088322863478416 Trust level: Full Application Virtual Path: / Application Path: C:\Program Files\Microsoft Dynamics CRM\CRMWeb\ Machine name: CRM_SERVER Process information: Process ID: 3508 Process name: w3wp.exe Account name: DOMAIN\service_account Exception information: Exception type: CrmException Exception message: Attribute objecttypecode on Entity PrincipalObjectAccessReadSnapshot is of type picklist but has Child Attributes Count 0 at

Dynamics CRM: Authentication is Required - Timing Out and Prompting for Credentials

If you are running Dynamics CRM 4.0 and 2011 with claims based authentication, by default you get a prompt saying "Authentication is Required" after 20 minutes. If you want to extend this timeout, you need to make some changes to the relying party trust in Active Directory Federation Services (ADFS).

Configuring a CRM Email Router to Run Under a Domain Service Account

If you tried running the CRM 2011 email router under a domain service account, you probably ran into some issues. Please, do not take the easy way out and make the account an administrator, you can give it the rights it needs without going to that extent.

The first thing it needs is the "log on as service" user right, but it should get that granted when you configure the service to run under your service account in services.msc. So, I'm going to assume that's already taken care of.

MSCRMEmail: Metadata contains a reference that cannot be resolved

Below is an error that can appear when you are running the CRM email router on the same server as your CRM web services. I experienced it after adding a second web site on the CRM server to run a portal that is back-ended by CRM. The error was also accompanied by high CPU and memory usage as well.

CRM 2011 Router Setup Fails on Windows Live ID Sign-in Assistant Install

I have installed the Microsoft Dynamics CRM 2011 Email Router several times, and there is one issue that I hit quite often. During the router install it attempts to install the Windows Live ID Sign-in Assistant. This component often fails to install without much explanation. If you try to manually download and install the Windows Live ID Sign-in Assistant, it fails with a vague error message saying:

Windows Live ID Sign-in Assistant Setup Wizard ended prematurely because of an error. Your system has not been modified. To install this program at a later time, run Setup Wizard again.