Error message in Microsoft CRM or in Microsoft Dynamics CRM client for Outlook: "The user authentication passed to the platform is not valid"

Symptoms

You receive the following error message in Microsoft CRM 1.2, in Microsoft Business Solutions - CRM 1.0, or in the Microsoft Dynamics CRM 3.0:

Invalid User Authorization. The user authentication passed to the platform is not valid.

You receive this error message after you do any of the following:

You log on to Microsoft CRM.
You change a Microsoft CRM user's business unit.
You go online in Microsoft CRM Sales for Outlook (the Outlook client).
You click any Microsoft CRM folder in the Microsoft CRM 3.0 client for Outlook.
You try to merge a Microsoft CRM 3.0 record.

Cause

Cause 1

This problem may occur if one or more of the following conditions are true:

A role is not assigned to the program user.
The business unit for the user record was recently changed in the program. When the business unit is changed in Microsoft CRM 1.2, in Microsoft Business Solutions - CRM 1.0, and in Microsoft Dynamics CRM 3.0, all the roles that were previously assigned to a user are removed. Also in Microsoft Dynamics CRM 3.0, when the business unit is changed, the change is not available in the Microsoft Dynamics CRM client for Outlook until you restart the computer.

Cause 2

This problem may occur if the Microsoft CRM server computer account is not a member of the Active Directory PrivUserGroup group and the SQLAccessGroup group.

Cause 3

This problem may occur if the user who owns the subordinate record that will be merged has been deleted from Active Directory.

Resolution

Resolution 1

Microsoft CRM 1.2, Microsoft Business Solutions - CRM 1.0, and Microsoft Dynamics CRM 3.0

To resolve this problem, assign the appropriate role to the user. To do this, follow these steps:

Log on to Microsoft CRM as a user who has the System Administrator role.
Click Home, click
Settings, click Business Unit Settings, and then click Users.
Double-click the user record in which you experience the problem.
Click Roles, click Manage Roles, and then select the appropriate role for this user.
Click OK, and then click Save and Close.

Follow these steps if you receive the error message that is mentioned in the "Symptoms" section when you go online in the Outlook client, and you changed the business unit that was assigned to the user:

Verify that the user is offline in the Outlook client.
In Microsoft CRM, change the business unit for the user back to the original business unit. To do this, follow these steps:
1. Open Microsoft CRM, click Home, click
  Settings, click Business Unit Settings, and then click Users.
2. Double-click the user record.
3. Click Actions, and then click
  Change Business Unit.
4. Click the original business unit that was assigned to the user, click OK, and then click Save and Close.
In the Outlook client, click Go Online.
After you are online, change the business unit for the user in Microsoft CRM.
Close and then reopen Microsoft Office Outlook.

Resolution 2

To resolve this problem, add the computer account to the PrivUserGroup group and to the SQLAccessGroup group in Active Directory:

On the domain controller, start Active Directory Users and Computers.
Right-click PrivUserGroup, and then click Properties.
Click the Members tab, click Add, and then add the CRM server computer account.
In Active Directory Users and Computers, right-click SQLAccessGroup, and then click Properties.
Click the Members tab, click Add, and then add the CRM server computer account.
On the Microsoft CRM server, click Start, click Run, and then type cmd.
At the command prompt, type iisreset.

Resolution 3

To resolve this problem, assign the subordinate record to a valid Microsoft CRM user:

Start Microsoft CRM.
Double-click the subordinate record that you want to merge.
Click Actions, click Assign, and then click Assign to another user.
From the list of users, select the new owner, and then click OK two times.

References

This article was TechKnowledge document 31789.