Rajeev Pentyala – Microsoft Power Platform

We have few existing users in our CRM application which we wanted to change the “Domain name”.

Users Domain Name (i.e., ‘User Name’ field)

Also we wanted this update to be done by a User who is not a “System administrator”.

We were getting below exception for few users, when we try to update the domain name of  User record.

Access is denied; Unable to get DNS Name of Domain

Troubleshoot steps

• Since the logged in user was not “System Administrator”, we thought there was some missing privilege preventing the user to change the domain name
• But at the same time “System Administrator” is able to update domain name successfully
• So we tried a trick by copying “System Administrator” role and created a new role and assigned the role to user and tried
• Still we were getting same exception with copy of “System Administrator” role

Reason

• The reason was “System administrator” role will be having some hidden privileges (Which are not available on Security role form)
• So the System Administrator role in order to make changes to the logon name.

Below articles helped me to understand the problem

• Hidden privileges
• MSDN Blog