Microsoft KB Archive/921393

= Error message when you try to log on to Microsoft Dynamics CRM 3.0: &quot;Login failed for user NT Authority\Anonymous&quot; =

Article ID: 921393

Article Last Modified on 6/27/2006

-

APPLIES TO


 * Microsoft Dynamics CRM 3.0

-





SYMPTOMS
When you try to log on to Microsoft Dynamics CRM 3.0, you receive the following error message:

Login failed for user NT Authority\Anonymous.

Then, if you press F5, you receive the following error message:

Microsoft CRM could not log on to the system. Make sure your user record is enabled and that you have been assigned at least one security role. For more information, contact your system administrator.

Additionally, when you try to use the Deployment Manager to access the User Manager, you receive the following error message:

The server http:// /MSCRMServices is not responding. This might happen if it is currently unavailable, it is not a Microsoft CRM Server, or you do not have sufficient privileges to run the User Manager. For more information, please contact your system administrator.

Note  is a placeholder that represents an actual Microsoft Dynamics CRM server.



CAUSE
This problem occurs because the service principal name (SPN) is not set.



RESOLUTION
To resolve this problem, follow these steps:  Log on to the computer that is running Microsoft SQL Server. Click Start, point to All Programs, point to Administrative Tools, and then click Services. Right-click MSSQLSERVER, and then click Properties. To see which account is used as the logon account, click the Log On tab.

Note If the Local System account is selected, this account is the computer account. The SPN must be added to the account that is running the MSSQLSERVER service. On the computer on which Microsoft Dynamics CRM is installed, log on as a user who has the domain administrator role. Install the Windows Support Tools on the Microsoft Dynamics CRM server. The tools are on the Microsoft Windows Server 2003 CD or on the Microsoft Windows 2000 Server CD.</li> Click Start, point to All Programs, point to Windows Support Tools, and then click Command Prompt.</li>  At the command prompt, run the following commands. setspn -A MSSQLSVC/SQL_server_name:1433 Service Account setspn -A MSSQLSVC/SQL_server_name.Domain_name:1433 Service Account Note  is a placeholder that represents an actual SQL server name. is a placeholder that represents an actual domain name. is a placeholder that represents the service account that is running the MSSQLSERVER service. The SPN must be added to this service account. If the Local System account is running the MSSQLSERVER service, use the  for the name of the service account. If a user account is running the MSSQLSERVER service, use  for the name of the service account. </li>  To verify that the SPN is set, run the following command at the command prompt. setspn -L Service Account </li></ol>

Keywords: kberrmsg kbmbsadministration kbtshoot kbmbsinstallation kbmbsmigrate kbprb KB921393

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.