crm does not get data in regular time periods

Hi Everyone,

CRM does not get any data from our sql server machine around every 10 to 20
minutes. Sql Server times out trying to send the data. This has been
happening ever since we changed a users business unit and changed the users
properties ie (roles) through the active directory.

When I go to the event viewer This error message coinsides with the time crm
is not getting data.

Error: Some security descriptors could not be adjusted after a privilege
change. -2147217871 (0x80040E31)

SOurce:MSCRMSecurityService
EventId: 6148

The numbers above are the code for sql server timing out. This link
http://www.kbalertz.com/kb_837528.aspx has helped me.

My theory is that our crm machine is blocking the data from sql server like
the article talks about. This problem only came around since we messed with
the users settings directly with the ad. So increasing the number of ports
seems to not be the answer cause it was working fine last week. why do we
need to increase the ports when it was fine last week. Is there a way to
check the RPC Ports to see if they are blocked. Or is there a way to fix the
active directory security descriptors?

Thanks for any help.

Mark

John
Wed Nov 10 01:56:45 CST 2004

there is a utility available only from MBS support which will rewrite your
security descriptors. What exactly did you change in the AD?

--
John O'Donnell
Microsoft CRM MVP
http://www.microsoft.com/BusinessSolutions/Community/CRMFaqLanding.aspx


"acdmark" <acdmark@discussions.microsoft.com> wrote in message
news:A071C1F3-BDC8-4106-8692-5077663BF22A@microsoft.com...
> Hi Everyone,
>
> CRM does not get any data from our sql server machine around every 10 to
20
> minutes. Sql Server times out trying to send the data. This has been
> happening ever since we changed a users business unit and changed the
users
> properties ie (roles) through the active directory.
>
> When I go to the event viewer This error message coinsides with the time
crm
> is not getting data.
>
> Error: Some security descriptors could not be adjusted after a privilege
> change. -2147217871 (0x80040E31)
>
> SOurce:MSCRMSecurityService
> EventId: 6148
>
> The numbers above are the code for sql server timing out. This link
> http://www.kbalertz.com/kb_837528.aspx has helped me.
>
> My theory is that our crm machine is blocking the data from sql server
like
> the article talks about. This problem only came around since we messed
with
> the users settings directly with the ad. So increasing the number of ports
> seems to not be the answer cause it was working fine last week. why do we
> need to increase the ports when it was fine last week. Is there a way to
> check the RPC Ports to see if they are blocked. Or is there a way to fix
the
> active directory security descriptors?
>
> Thanks for any help.
>
> Mark

acdmark
Wed Nov 10 11:52:01 CST 2004

Hi John,

A user was moved to a different business unit. Then report the access denied
error. So we looked at the AD and noticed he had no roles(cause he was
switched to a new business unit) Then we added his roles back directly in the
active directory. Still having getting the access denied error we removed
them in crm and then added them again.

Mark

John
Thu Nov 11 02:51:27 CST 2004

ahh that is why . when you move a user between business units their role
gets removed but you must re-add their role through the crm interface and
not by accessing through the active directory

--
John O'Donnell
Microsoft CRM MVP
http://www.microsoft.com/BusinessSolutions/Community/CRMFaqLanding.aspx


"acdmark" <acdmark@discussions.microsoft.com> wrote in message
news:D3F38B90-2241-40A4-8066-55985A3E61F9@microsoft.com...
> Hi John,
>
> A user was moved to a different business unit. Then report the access
denied
> error. So we looked at the AD and noticed he had no roles(cause he was
> switched to a new business unit) Then we added his roles back directly in
the
> active directory. Still having getting the access denied error we removed
> them in crm and then added them again.
>
> Mark
>

acdmark
Fri Nov 12 12:24:07 CST 2004

Hi John,

I am running the security descriptor tool from microsoft crm support now so
I will let you know if that works.

P.S CRM is working fine now. But the user that was moved still gets access
denied. Can't wait for his access to be resolved.

Mark

John
Tue Nov 16 19:46:32 CST 2004

the tool should fix this as it rewrites all the security descriptors. I have
seen this issue 4 times now when you cant access data even though the role
says you can. Let us know if you are successful

--
John O'Donnell
Microsoft CRM MVP
http://www.microsoft.com/BusinessSolutions/Community/CRMFaqLanding.aspx


"acdmark" <acdmark@discussions.microsoft.com> wrote in message
news:FA05F6E0-2FA9-4C1B-8430-6AB10852F464@microsoft.com...
> Hi John,
>
> I am running the security descriptor tool from microsoft crm support now
so
> I will let you know if that works.
>
> P.S CRM is working fine now. But the user that was moved still gets access
> denied. Can't wait for his access to be resolved.
>
> Mark