Microsoft KB Archive/841124

= An update is available to reduce the permissions required to operate the Microsoft CRM 1.2 Sales for Outlook client =

Article ID: 841124

Article Last Modified on 9/8/2006

-

APPLIES TO


 * Microsoft Business Solutions CRM Sales for Outlook, when used with:
 * Microsoft CRM 1.2
 * Microsoft CRM 1.2

-



SUMMARY
Microsoft® CRM Sales for Outlook (the Outlook client) is the integrated Microsoft Outlook® client for Microsoft Business Solutions CRM that enables access to the same data as the Microsoft CRM Web application. Additionally, the client application also includes offline functionality. In the past, it has been required that the person installing and using the Outlook client be a valid Microsoft CRM user with roles and a license, and a local administrator on the client computer. Using the update program and the manual configuration procedures explained in this article, you can now configure the client computer so that a Microsoft CRM user does not have to be a local administrator to use the Outlook client.

Note Local administrator credentials must be provided to install the Outlook client. Also, installing future client updates and hotfixes will require local administrator rights to be regranted. The administrative rights can be removed again after any update or hotfix is installed.



RESOLUTION
Configuring the Outlook client to operate with reduced permissions requires a series of manual steps and downloading, extracting, and running a script program.

The download package is available from the Microsoft Download Center:

http://www.microsoft.com/downloads/details.aspx?FamilyId=3C97B2D0-4A45-44A8-A630-165C63E0F4E8&displaylang=en

For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to Obtain Microsoft Support Files from Online Services

Microsoft has scanned these files for viruses. Microsoft used the most current virus-detection software that was available on the date that these files were posted. These files are stored on secure servers that prevent any unauthorized changes to these files.

Installation information
Installation information is specified in the following procedures.

File information
The English version of this file has the file attributes as listed in the following table. The dates and times for this file are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, click the Time Zone tab in the Date and Time tool in Control Panel.

Microsoft CRM Sales for Outlook

Download file name: CRM1.2-KB841124-Client.exe

  Date         Time   Version       Size     File name --  18-Apr-2004  10:07  5.2.3790.0  36,864  regini.exe 4-Aug-2004  05:29    None       87     mscrm.ini 27-Jul-2004 05:58    None      1,763   outlooksec.cmd 18-May-2004 10:18    None      264     outlooksecmain.cmd

Procedures
Perform the following steps to configure the Outlook client computer so that a Microsoft CRM user does not have to be a local administrator to use the Outlook client. These procedures are general in nature. Detailed procedures where appropriate are provided later in this article.

Note For these procedures to work correctly, both the administrator and the user must be valid users in the Active Directory domain that contains the Microsoft CRM server.
 * 1) On the client computer, add a valid Microsoft CRM user to the local administrators group. This user must be the same as the Outlook client user. (See the detailed procedure later in this article for adding a user to the local administrators group.)
 * 2) Log on to the client computer as the Microsoft CRM user (now a local administrator). Install the Outlook client. (See the Microsoft Business Solutions CRM Implementation Guide Version 1.2 for installation procedures.)
 * 3) Perform Outlook client tasks such as viewing a record list and creating a new record. Then go offline and make sure that you have function generally offline. Go online again. If you often use import functionality, you need to use the import feature now.
 * 4) Log off the client computer.
 * 5) Log on to the client computer as an administrator (a domain user with local administrative rights and who is not the Microsoft CRM user who installed the Outlook client).
 * 6) Remove the Microsoft CRM client user from the local administrators group. (See the detailed procedure later in this article for removing a user from the local administrators group.)
 * 7) Extract the Outlooksecmain.cmd file from the download package and run the following script at a command prompt. The Microsoft CRM user’s domain name and user name are required parameters.

Outlooksecmain.cmd [domainname\username]

For example: Outlooksecmain.cmd userdomainname\username

Outlooksecmain.cmd is a script that grants users permissions to the folder %systemroot%\Microsoft.NET\Framework, uses osql.exe to grant permissions to all MSDE databases. On Microsoft Windows® 2000 systems, it uses regini.exe to grant required Registry permissions. It will write to the log file, outlooksec.log, which can be used for troubleshooting.
 * 1) Log off the computer, and log back on to the computer as the Microsoft CRM user, and then open the Outlook client.

Detailed Procedures
Add a user to the local administrators group
 * 1) On the client computer, click Start, point to Control Panel, point to Administrative Tools, and then click Computer Management.
 * 2) In the console tree, expand Local Users and Groups, and then click Groups.
 * 3) Right-click the Administrators group, click Add to Group, and then click Add.
 * 4) Click Locations, click the domain containing the user you want to add, and then click OK.
 * 5) In the Enter the object names to select box, type the name of the user you want to add to the group, and then click OK. If you want to validate the user name that you are adding, click Check Names.
 * 6) Click Apply, and then click OK.
 * 7) Close Computer Management.

Remove a user from the local administrators group
 * 1) On the client computer, click Start, point to Control Panel, point to Administrative Tools, and then click Computer Management.
 * 2) In the console tree, expand Local Users and Groups, and then click Groups.
 * 3) Double-click the Administrators group, click the user that you want to remove. Click Remove, and then click OK.
 * 4) Close Computer Management.

Extract the files from the download package
 * 1) Place the download package CRM1.2-KB841124-Client.exe in a temporary folder.
 * 2) Double-click CRM1.2-KB841124-Client.exe. The contents of the package extract to the temporary folder.



FAT32 File Systems
If you change the file system on the client computer from FAT32 to NTFS, you will have to re-install the Microsoft CRM Outlook client, and then follow the steps in this article to enable the client to function with reduced permissions.

Microsoft CRM Integration for Great Plains
If your organization is using Microsoft CRM Integration for Great Plains®, Microsoft recommends that you install the integration server before you install any Outlook clients. This will make sure that all Outlook clients work correctly in an integrated environment. If you have already installed an Outlook client before installing the integration server, you need to modify the registry on the client computer. This will enable an offline Outlook client to function correctly in the integrated environment.

Important This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry

Edit the registry
 * 1) On the Microsoft CRM server, click Start, click Run, in the Open box, type regedit, and then click OK.
 * 2) Add the following subkey:

HKLM\Software\Microsoft\MSCRMIntegrationServer

Uninstall information
A Microsoft CRM Outlook client user who does not have local administrator rights can successfully uninstall the Outlook client. However, local administrator rights are needed to remove MSDE and the Microsoft CRM registry keys.

Keywords: kbqfe kbmbsmigrate kbhotfixserver KB841124

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.