Error message in the Workflow Monitor when you use a callout to programmatically run a workflow rule that sends an e-mail message in Microsoft Dynamics CRM 3.0: "0X800404cc"

• The Microsoft CRM Workflow Service is running under the Local System account or under the Network Service account. When the Microsoft CRM Workflow Service is configured under either of these accounts, permission to send e-mail messages is based on the user. When this issue occurs, the account does not have permissions to send e-mail messages in Microsoft Dynamics CRM 3.0.
• The CRMAppPool application pool and the Microsoft CRM Workflow Service are running under two different accounts. When you pass credentials from a callout to the workflow rule, both the CRMAppPool application pool and the Microsoft CRM Workflow Service should be running under the same account.
• The account that is running the CRMAppPool application pool and the Microsoft CRM Workflow Service is not a member of the following groups:
  • The Local Administrator group on the Microsoft Dynamics CRM server
  • The IIS_WPG group on the Microsoft Dynamics CRM server
  • The CRM_WPG group on the Microsoft Dynamics CRM server
  • The PrivUserGroup in Active Directory
  • The SQLAccessGroup group in Active Directory

Step 1: Start the Microsoft CRM Workflow Service as a Microsoft Dynamics CRM user who has a System Administrator role

1. Click Start, click Run, type services.msc in the Open box, and then click OK.
2. Right-click Microsoft CRM Workflow Service, and then click Properties.
3. Click the Log On tab.
4. Click This account, and then type the credentials for an administrator account in Microsoft Dynamics CRM 3.0.
5. Click OK to close the Microsoft CRM Workflow Service Properties dialog box.
6. Restart the Microsoft CRM Workflow Service.

Step 2: Set the CRMAppPool application pool to run under the same account that is running the Microsoft CRM Workflow Service

1. Click Start, point to All Programs, point to Administrative Tools, and then click Internet Information Services (IIS) Manager.
2. Expand the Microsoft Dynamics CRM 3.0 server name.
3. Expand Application Pools.
4. Right-click CRMAppPool, and then click Properties.
5. Click the Identity tab.
6. Click Configurable, and then type the credentials for the user who is running the Microsoft CRM Workflow Service.
7. Click OK to close the CRMAppPool Properties dialog box.

Step 3: Add the user who is running the CRMAppPool application pool and the Microsoft CRM Workflow Service

• The Local Administrator group on the Microsoft Dynamics CRM server
• The IIS_WPG group on the Microsoft Dynamics CRM server
• The CRM_WPG group on the Microsoft Dynamics CRM server
• The PrivUserGroup in Active Directory
• The SQLAccessGroup group in Active Directory

1. On the Microsoft Dynamics CRM server, click Start, right-click My Computer, and then click Manage.
2. Expand Local Users and Groups, and then click Groups.
3. Double-click the Administrators group, and then add the administrator account as a member.
4. Double-click the IIS_WPG group, and then add the administrator account as a member.
5. Double-click the CRM_WPG group, and then add the administrator account as a member.
6. Click Start, click Run, type iisreset, and then click OK.
7. On the domain controller, click Start, click Run, type dsa.msc in the Open box, and then click OK.
8. Right-click the PrivUserGroup group, and then click Properties.
9. Click the Members tab.
10. Click Add, add the user who is running the Microsoft CRM Workflow Service and the CRMAppPool application pool, and then click OK.
    
    Note If the user already exists, go to the next step.
11. Right-click the SQLAccessGroup group, and then click Properties.
12. Click the Members tab.
13. Click Add, add the user who is running the Microsoft CRM Workflow Service and the CRMAppPool application pool, and then click OK.
    
    Note If the user already exists, no changes are necessary. If there are multiple domain controllers, it may take some time for the changes to replicate to all the servers.

Example

// Set up the CRM Service.
CrmService service = new CrmService();
service.Credentials = System.Net.CredentialCache.DefaultCredentials;

// Create the request.
ExecuteWFProcessRequest request = new ExecuteWFProcessRequest();
request.ProcessId = new Guid("{8DC95CE2-1A27-4CEA-9E6A-8F6BCC4B658D}");
request.EntityMoniker = new Moniker();
request.EntityMoniker.Id = createdId;
request.EntityMoniker.Name = EntityName.account.ToString();

// Execute the request.
ExecuteWFProcessResponse response = (ExecuteWFProcessResponse) service.Execute(request);