An update is available to reduce the permissions required to operate the Microsoft CRM 1.2 Sales for Outlook client

Article translations Article translations
Article ID: 841124 - View products that this article applies to.
This article has been archived. It is offered "as is" and will no longer be updated.
Expand all | Collapse all

On This Page

Summary

Microsoft® CRM Sales for Outlook (the Outlook client) is the integrated Microsoft Outlook® client for Microsoft Business Solutions CRM that enables access to the same data as the Microsoft CRM Web application. Additionally, the client application also includes offline functionality. In the past, it has been required that the person installing and using the Outlook client be a valid Microsoft CRM user with roles and a license, and a local administrator on the client computer. Using the update program and the manual configuration procedures explained in this article, you can now configure the client computer so that a Microsoft CRM user does not have to be a local administrator to use the Outlook client.

Note Local administrator credentials must be provided to install the Outlook client. Also, installing future client updates and hotfixes will require local administrator rights to be regranted. The administrative rights can be removed again after any update or hotfix is installed.

Resolution

Configuring the Outlook client to operate with reduced permissions requires a series of manual steps and downloading, extracting, and running a script program.

The download package is available from the Microsoft Download Center:
http://www.microsoft.com/downloads/details.aspx?FamilyId=3C97B2D0-4A45-44A8-A630-165C63E0F4E8&displaylang=en
For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to Obtain Microsoft Support Files from Online Services
Microsoft has scanned these files for viruses. Microsoft used the most current virus-detection software that was available on the date that these files were posted. These files are stored on secure servers that prevent any unauthorized changes to these files.

Installation information

Installation information is specified in the following procedures.

File information

The English version of this file has the file attributes as listed in the following table. The dates and times for this file are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, click the Time Zone tab in the Date and Time tool in Control Panel.

Microsoft CRM Sales for Outlook
Download file name: CRM1.2-KB841124-Client.exe
   Date         Time   Version       Size     File name 
   ----------------------------------------------------------
   18-Apr-2004  10:07  5.2.3790.0  36,864  regini.exe
   4-Aug-2004   05:29    None       87     mscrm.ini
   27-Jul-2004  05:58    None      1,763   outlooksec.cmd
   18-May-2004  10:18    None      264     outlooksecmain.cmd

Procedures

Perform the following steps to configure the Outlook client computer so that a Microsoft CRM user does not have to be a local administrator to use the Outlook client. These procedures are general in nature. Detailed procedures where appropriate are provided later in this article.

Note For these procedures to work correctly, both the administrator and the user must be valid users in the Active Directory domain that contains the Microsoft CRM server.
  1. On the client computer, add a valid Microsoft CRM user to the local administrators group. This user must be the same as the Outlook client user. (See the detailed procedure later in this article for adding a user to the local administrators group.)
  2. Log on to the client computer as the Microsoft CRM user (now a local administrator). Install the Outlook client. (See the Microsoft Business Solutions CRM Implementation Guide Version 1.2 for installation procedures.)
  3. Perform Outlook client tasks such as viewing a record list and creating a new record. Then go offline and make sure that you have function generally offline. Go online again. If you often use import functionality, you need to use the import feature now.
  4. Log off the client computer.
  5. Log on to the client computer as an administrator (a domain user with local administrative rights and who is not the Microsoft CRM user who installed the Outlook client).
  6. Remove the Microsoft CRM client user from the local administrators group. (See the detailed procedure later in this article for removing a user from the local administrators group.)
  7. Extract the Outlooksecmain.cmd file from the download package and run the following script at a command prompt. The Microsoft CRM user’s domain name and user name are required parameters.
    Outlooksecmain.cmd [domainname\username]

    For example: Outlooksecmain.cmd userdomainname\username

    Outlooksecmain.cmd is a script that grants users permissions to the folder %systemroot%\Microsoft.NET\Framework, uses osql.exe to grant permissions to all MSDE databases. On Microsoft Windows® 2000 systems, it uses regini.exe to grant required Registry permissions. It will write to the log file, outlooksec.log, which can be used for troubleshooting.
  8. Log off the computer, and log back on to the computer as the Microsoft CRM user, and then open the Outlook client.

Detailed Procedures

Add a user to the local administrators group
  1. On the client computer, click Start, point to Control Panel, point to Administrative Tools, and then click Computer Management.
  2. In the console tree, expand Local Users and Groups, and then click Groups.
  3. Right-click the Administrators group, click Add to Group, and then click Add.
  4. Click Locations, click the domain containing the user you want to add, and then click OK.
  5. In the Enter the object names to select box, type the name of the user you want to add to the group, and then click OK. If you want to validate the user name that you are adding, click Check Names.
  6. Click Apply, and then click OK.
  7. Close Computer Management.
Remove a user from the local administrators group
  1. On the client computer, click Start, point to Control Panel, point to Administrative Tools, and then click Computer Management.
  2. In the console tree, expand Local Users and Groups, and then click Groups.
  3. Double-click the Administrators group, click the user that you want to remove. Click Remove, and then click OK.
  4. Close Computer Management.
Extract the files from the download package
  1. Place the download package CRM1.2-KB841124-Client.exe in a temporary folder.
  2. Double-click CRM1.2-KB841124-Client.exe. The contents of the package extract to the temporary folder.

More information

FAT32 File Systems

If you change the file system on the client computer from FAT32 to NTFS, you will have to re-install the Microsoft CRM Outlook client, and then follow the steps in this article to enable the client to function with reduced permissions.

Microsoft CRM Integration for Great Plains

If your organization is using Microsoft CRM Integration for Great Plains®, Microsoft recommends that you install the integration server before you install any Outlook clients. This will make sure that all Outlook clients work correctly in an integrated environment. If you have already installed an Outlook client before installing the integration server, you need to modify the registry on the client computer. This will enable an offline Outlook client to function correctly in the integrated environment.

Important This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:
256986 Description of the Microsoft Windows Registry
Edit the registry
  1. On the Microsoft CRM server, click Start, click Run, in the Open box, type regedit, and then click OK.
  2. Add the following subkey:
    HKLM\Software\Microsoft\MSCRMIntegrationServer

Uninstall information

A Microsoft CRM Outlook client user who does not have local administrator rights can successfully uninstall the Outlook client. However, local administrator rights are needed to remove MSDE and the Microsoft CRM registry keys.

Properties

Article ID: 841124 - Last Review: October 26, 2013 - Revision: 5.0
Applies to
  • Microsoft Business Solutions CRM Sales for Outlook, when used with:
    • Microsoft CRM 1.2
  • Microsoft CRM 1.2
Keywords: 
kbnosurvey kbarchive kbqfe kbhotfixserver kbmbsmigrate KB841124

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com