Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. "Access is denied" error when attempting to connect Microsoft Dynamics CRM for Office Outlook

"Access is denied" error when attempting to connect Microsoft Dynamics CRM for Office Outlook

View products that this article applies to.

Symptoms

When attempting to connect Microsoft Dynamics CRM for Office Outlook with an On-Premises CRM organization and do not include the organization name in the Claims Based Authentication URL, you encounter the following error message:

"Cannot connect to Microsoft Dynamics CRM server because we cannot authenticate your credentials. 

Check your connection or contact your administrator for more help."

↑ Back to the top

Cause

Microsoft Dynamics CRM for Office Outlook was unable to authenticate you because the organization name was not included in the URL.

↑ Back to the top

Resolution

Provide the organization name as part of the Claims Based Authentication URL when configuring the Microsoft Dynamics CRM for Office Outlook client.

Example URL Format: https://<crmservername>.<domain>.<domainsuffix>/<orgname>
Example URL: https://crmserver.contoso.com/contoso

NOTE: If you have your Microsoft Dynamics CRM organization configured as an Internet Facing Deployment (IFD), you can also access via your IFD URL which includes the organization name:

Example IFD URL Format: https://<orgname>.<domain>.<domainsuffix>
Example IFD URL: https://contoso.contoso.com

↑ Back to the top

More Information

When you click Details, the following additional information appears and is also available in the log file:

Access is denied.

Server stack trace:
   at System.ServiceModel.Channels.ServiceChannel.ThrowIfFaultUnderstood(Message reply, MessageFault fault, String action, MessageVersion version, FaultConverter faultConverter)
   at System.ServiceModel.Channels.ServiceChannel.HandleReply(ProxyOperationRuntime operation, ProxyRpc& rpc)
   at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
   at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)

Exception rethrown at [0]:
   at System.Windows.Forms.Control.MarshaledInvoke(Control caller, Delegate method, Object[] args, Boolean synchronous)
   at System.Windows.Forms.Control.Invoke(Delegate method, Object[] args)
   at System.Windows.Forms.Control.Invoke(Delegate method)
   at Microsoft.Crm.Outlook.ClientAuth.ClientAuthProvider`1.RetrieveUserCredentialsAndSignIn(Control parentWindow, Boolean retryOnError, IClientOrganizationContext context)
   at Microsoft.Crm.Outlook.ClientAuth.ClientAuthProvider`1.SignIn(AuthUIMode uiMode, IClientOrganizationContext context, Control parentWindow, Boolean retryOnError)
   at Microsoft.Crm.Application.Outlook.Config.DeploymentsInfo`1.DeploymentInfo`1.LoadOrganizationsInternal(AuthUIMode uiMode, Control parentWindow)
   at Microsoft.Crm.Application.Outlook.Config.DeploymentsInfo`1.DeploymentInfo`1.LoadOrganizations(AuthUIMode uiMode, Control parentWindow, IClientAuthProvider`1 authenticatedProvider)
   at Microsoft.Crm.Application.Outlook.Config.DeploymentsInfo`1.InternalLoadOrganizations(DataCollection`1 orgs, AuthUIMode uiMode, Control parentWindow)

↑ Back to the top

Keywords: kbmbspartner, kbmbsmigrate, kbsurveynew, kb

↑ Back to the top

Article Info
Article ID : 3088205
Revision : 1
Created on : 1/7/2017
Published on : 8/10/2015
Exists online : False
Views : 281