The system crashes when you add an account that is running the CRMAppPool as a Microsoft Dynamics CRM user

適用対象: Microsoft Dynamics CRM 2011Dynamics CRM 4.0

Symptoms


When you add an account that is running the CRMAppPool as a Microsoft Dynamics CRM user, the system crashes. Additionally, you may receive errors that resemble the following:

SecLib::RetrievePrivilegeForUser failed - no roles are assigned to user. Returned hr = -2147209463, User: [userid]

Cause


By default, when a CRM user is created in Microsoft Dynamics CRM, the user has no security roles. Because the CRM service account is mapped with the newly created user, the CRM service account cannot operate anything. Therefore, the system crashes.

This behavior is by design. Making the account that is running the CRMAppPool into a Microsoft Dynamics CRM user is not supported.

Resolution


Keep the CRM service account as a dedicated service account.

More Information


More information is available in the "Services and CRMAppPool IIS application pool identity permissions" section of the Microsoft Dynamics CRM 2011 Implementation Guide. To download the guide, visit the following Microsoft website: