Archive for February, 2013

Using CRM 2011 SOAP and REST endpoints with Silverlight

February 27, 2013 Leave a comment

To communicate with CRM 2011 from Silverlight application you can either use SOAP or REST endpoints.

URL’s for both endpoints will be available under “Developer Resources” section (Go to Settings -> Customizations -> Developer Resources)

SOAP and REST endpoints

SOAP and REST endpoints

Below are the important points on usage & limitations of both endpoints

Using REST endpoint with Silverlight

  • CRM 2011 uses the WCF Data Services framework to provide an OData endpoint that is a REST-based data service.
  • This endpoint is called the Organization Data Service
  • It supports early bound entity types so that the coding will be easy (i.e., you can instantiate contact c=new contact();”Rajeev”)
  • Limitations
    • Only Create, Retrieve, Update, and Delete actions can be performed on entity records
    • You need to regenerate the proxy every time you change the entity schema (Ex – If you create a new entity or attribute)
    • You cannot use late binding to work with custom entities that were not included when proxy generated.
    • Here is the MSDN article Walkthrough REST in Silverlight

Using SOAP endpoint with Silverlight


Access denied to temporary files folder – error while browsing Aspx page

February 20, 2013 Leave a comment

I was getting below “Access denied” error, when I was browsing my Aspx page hosted in IIS 7.

Access denied Aspx page

Access denied temp files

Hers are more details about my hosted web application

  • Website application pool’s Pipeline mode is “Integrated”
  • Application pool Identity set to a Service Account

Below is the reason and fix that worked in my case


  • Issue seems a permission issue to access the temporary folder, for the account under which the website is running.
  • In our scenario, it’s the “Service Account” under which website is running does not have write access to Temp folder

Fix 1

  •  Provide “Write” access to the “C:\Windows\Temp” folder, to the Account under which your application running

Fix 2

  • Grant the required permissions to the “Service Account” by running Aspnet_regiis.exe -ga [User id]
    • So it grants the specified user or group access to the IIS metabase and other directories that are used by ASP.NET.
    • We typically use this option when creating a custom service account.
Grant Access

Grant Access


How to set 24 or 12 hour time format setting in CRM

February 16, 2013 Leave a comment

In CRM, if you want show your date time fields with either 24 or 12 hour time formats, we can easily do it with either System settings/ Personal options

System settings :-

You can make the SYSTEM level “Time format” setting by

  • Go to Settings –> Administration –> System settings
  • Go to “Formats” tab; Click on “Customize”
  • Go to “Time” tab
  • Choose the desired “Time Format”
Time formats

Time formats

Time format Notations

  • “H” (Upper case) – 24 hour format
  • “h” (Lower case) –  12 hour format

Personal options :-

You can make the USER level  “Time format” setting by

  • Choose “File –> Options”
Personal settings

Personal Options

  • Follow the same steps as mentioned for system settings

Note : Personal options always overrides System settings


AD Groups created with CRM 2011 installation

February 13, 2013 Leave a comment

With CRM installation below Active Directory (AD) Groups get created in the Organization Unit (OU) you chosen.

Below is the description of 4 AD Groups

AD Name


SQLAccessGroup The members of this group get access to CRM filtered views
PrivUserGroup CRM user group for special administrative functions; Including CRMAppPool identity (domain user or NetworkService). The users who configure CRM must be added to this group.
PrivReportingGroup This group create during CRM Server Setup and configured   during CRM Reporting Extensions Setup.
ReportingGroup All CRM users are included in this group.This group is updated automatically as users are added and   removed from CRM. By default, all CRM Reporting Services reports grant Browse   permission to this group.

These groups specific to the Organization. So a new set of groups get created when you create a new Organization.

If you have multiple Organizations each group will be suffixed by Organization GUID.

AD Groups

AD Groups

The user authentication passed to the platform is not valid error – CRM 2011

February 8, 2013 Leave a comment

We were getting below exception when we click “Track in CRM” button from CRM 2011 outlook client

The user authentication passed to the platform is not valid

User Authentication Invalid

User Authentication Invalid


We fixed the issue by providing the “Act on Behalf of Another User” privilege to the User’s security role

Act on Behalf of Another User

Act on Behalf of Another User

So what is this privilege “Act on Behalf of Another User”?

  • This privilege defines whether the user can impersonate another user.
  • For example, you might want the system administrator to impersonate another user to act on behalf of the other user when doing some operations.
  • Impersonation is only possible using the SDK and plugins, not in the application.

Another scenario

  • You would get the same exception when you try to login to CRM with specific users.
  • The reason could be your CRM user’s AD account is either deleted or re-created with different domain name.
  • Refer this link for the resolution steps