Skip to content
Mohamed Mostafa's Blog

Mohamed Mostafa's Blog

#MSDyn365 #MSDynCRM Resources, Information, best practices & help on Microsoft Dynamics 365 CRM, .NET (C#, MVC & ASP.Net), Integration, Scribe, ECommerce, Business Transfomration and more.

Month: May 2014

Posted on 3 May 201413 May 2014

#MSDynCRM rsProcessingAborted Error Fix: Setting up Service Principal Names SPN values for Microsoft Dynamics CRM #CRM2013 service accounts when Reports created by report wizard fail during execution

When reports created by report wizard fail when executing with error rsProcessingAborted, there could be a number of reasons. One possible cause is that Service Principal Names SPNs are not set for the Dynamics CRM Service accounts running the CRM Application pool (CRM AppPool).

This issue occurs when you have a dedicated SQL Reporting server and/or when a domain account is used for CRMAppPool. This should not be the cause if you have CRM and reporting server on the same server (or virtual machine) and you are not using a domain account (such as network service). SPNs will be required if you are using a domain account instead of Network Service in this case.

You must already have SRS Data connector for Dynamics CRM installed successfully on the Reporting Server. If not, you need to install it first as it be the cause of the rsProcessingAborted error.

This resolution only applies if Microsoft Dynamics CRM Standard Reports run successfully but reports that were created by report wizard or custom FetchXML reports do not execute successfully. They will usually fail raising the not very helpful “rsProcessingAborted” error.

SQL Reporting Logs will contain this error:

Microsoft.Crm.CrmException: An unexpected error occurred.
System.ServiceModel.Security.SecurityNegotiationException: A call to SSPI failed, see inner exception.
System.Security.Authentication.AuthenticationException: A call to SSPI failed, see inner exception.
System.ComponentModel.Win32Exception: The target principal name is incorrect

The cause of this error is that the FetchXML query needs to be able to resolve to a HTTP SPN in order to fully communicate between the server. In a scenario where the Microsoft Dynamics CRM application pool is being run by a domain account the query will be looking for a HTTP SPN that does not exist by default.

Sections A and B below will resolve the issue. With the introduction of Kernel Mode authentication in IIS 7 there are additional steps required. For more information see the link at the end of this post:

A) Set the Service Principal Names (SPN) value for the service account running the CRM Application Pool. If there is only one CRM Web server steps 4 and 5 can be skipped.

1. Open an elevated command prompt window. To open an elevated Command Prompt window, click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.

2. Type setspn -a HTTP/<ServerName> <ServiceAccountDomain>\<ServiceAccount>, where <ServerName> is the name of the server, <ServiceAccountDomain> is the name of the domain containing the CRMAppPool service account, and <ServiceAccount> is the name of the CRMAppPool service account.

3. Type setspn -a HTTP/<ServerFQDN> <ServiceAccountDomain>\<ServiceAccount>, where <ServerFQDN> is the fully qualified domain name (FQDN) of the server.

4. Type setspn -a HTTP/<ClusterName> <ServiceAccountDomain>\<ServiceAccount>, where <ClusterName> is the name of the AD RMS cluster.

5. Type setspn -a HTTP/<ClusterFQDN> <ServiceAccountDomain>\<ServiceAccount>, where <ClusterFQDN> is the fully qualified domain name (FQDN) of the cluster.
B) Set the IIS useAppPoolCredentials value to True for the CRM Website:

**Note Installation of the IIS 7 Admin Pack linked below is required. The Admin pack is normally installed by default.

http://www.iis.net/extensions/AdministrationPack

1. Open IIS Manager.

2. Expand the server and then selet Sites. Then select the Microsoft CRM website.

3. Under Management, select Configuration Editor.

4. In the From: section above the properties select “ApplicationHost.config <location path=…”

5. For the “Section:” location, select system.webServer > security > authentication > windowsAuthentication.

6. In the properties page, set useAppPoolCredentials to True, then select Apply.
To summarise, I used two Set SPN commands to resolve this issue on my VM which had all CRM, SQL RS and SQL Server on the same Virtual machine and when I had a domain service account running the App Pool:

setspn -a HTTP/<ServerName> <ServiceAccountDomain>\<ServiceAccount>
Example:
setspn -a HTTP/crmdevsrv mmcrm\crmservice
setspn -a HTTP/<ServerFQDN> <ServiceAccountDomain>\<ServiceAccount>
Example:
setspn -a HTTP/crmdevsrv.mmcrm.crm.local mmcrm\crmservice

You also must ensure that the Domain service accounts are part of these Active Directory Groups: PrivReporting, PrivUser and SQLAccess Groups

A non-recommended work around is to make these groups have access to the CRM Config DB and each CRM Org DB as well as the Reporting server Database. I strongly don’t recommend doing this as it is much more than what is needed.

The minimum access requirements for each Group are:
The main source for this post is this KB article: http://support.microsoft.com/kb/2590774/en-gb

Share this:

  • Share
  • Twitter
  • LinkedIn
  • Email
  • Print
  • Facebook
  • Google
  • Reddit
  • Tumblr
  • Pinterest
  • Pocket

Like this:

Like Loading...
Authorised Microsoft Dynamics CRM Community Blog

Follow me on Twitter!

Tweets by @MIM_CRM

Top Posts

  • Automatically Track All Incoming and Outgoing Email Messages in Dynamics 365 without opening Outlook and across any device :: Pure Exchange and Dynamics 365 Server Side Synchronisation
  • Microsoft Dynamics CRM 2011 and Online Error Codes - full list of API Web Service Error Codes from SDK
  • Hide Areas & Sub Areas in the SiteMap using Security Roles in Dynamics CRM (Privilege tag)
  • MS CRM Key Generator error - Invalid Action - Microsoft CRM 4 Error.
  • Create an image from a .vhd disk on Microsoft Windows Azure - error VHD is already registered with image repository
  • Configure Microsoft SQL Server to allow remote connection and remote SQL Management Studio access
  • Free GDPR Add-on Solution for Microsoft Dynamics 365 CRM Customer Engagement
  • Generate Data Model and Entity Relationship Diagram (ERD) Visio diagram for a Dynamics CRM solution Using CRM SDK

Most recent comments

  • Thomas Sandsør on Automatically Track All Incoming and Outgoing Email Messages in Dynamics 365 without opening Outlook and across any device :: Pure Exchange and Dynamics 365 Server Side Synchronisation
  • Daryl LaBar on Dynamics 365 Testing Frameworks – open source GitHub Microsoft Dynamics CRM Testing Tools
  • suersh on Are you watching Dynamics 365 Fortnight Fridays?
  • alex on Free Open Source Dynamics 365 Photo Gallery: MMDPG for short
  • alex on Free Open Source Dynamics 365 Photo Gallery: MMDPG for short

RSS Feeds

  • RSS - Posts
  • RSS - Comments

RSS Dynamics 365 Customer Engagement Team Blog

  • What’s new in Voice of the Customer version 9.0.1438.3/9.0.1438.4 21 February 2019
  • Release Notes for Universal Resource Scheduling, February 2019 20 February 2019
  • Release Notes for Universal Resource Scheduling, January 2019 20 February 2019
  • Release Notes for Project Service Automation Update Release 12, V2.4.9.70 13 February 2019
  • Release Notes for Project Service Automation Update Release 4 13 February 2019

RSS Unknown Feed

RSS Microsoft Dynamics ISV Architect Evangelism

  • Multiple Sclerosis (or MS): Bike to the Bay 2013, Delaware 12 September 2013
  • VEVO Windows 8 App 19 June 2013
  • Windows Store Apps - Best Practices: How to Report Infringement in Apps 14 June 2013

Recent posts on my favourite blogs:

  • Occassionally I am not thinking about Dynamics 365: I created and caught a frozen snow bubble.
  • In the world of Dynamics 365, configuration/customization/extension does not equal the old world assumptions of "custom software"
  • Dynamics 365 CE April Update First Look
  • PowerApps Form Editor Preview First Look
  • Error importing solutions - "The 'options' attribute is invalid"
  • Clinical depression is not an emotion
  • Plugins in the sandbox, and why you don't get System.Security.Permissions.SecurityPermission
  • A decade of XRM
  • Advanced Find Before Today or Older Than Today
  • CRM Default Team and Business Unit Delete Error Caused by WIP Bin queue
  • Customizing Charts using XML – Part 1
  • Selecting a Mail Merge Addon for Microsoft Dynamics CRM 2011

Tags & Posts

#Announcement #LearnDyn365 #Learning #Mentoring #MSDynCRM .NET API Azure Book Review CRM CRM 2011 CRM 2013 CRM 2015 Custom Entity Dynamics Dynamics 365 Dynamics365 Dynamics CRM Entity Error Event Log Field GDPR IIS Integration Internet Explorer JavaScript Microsoft Microsoft Dynamics CRM MSDyn365 New Features Outlook Relationship Reporting Services Report Server Report Viewer SCRIBE Scribe Console Scribe CRM Adaptor script SDK SQL Server WCF Web Service what's new

Archives

  • November 2018
  • October 2018
  • August 2018
  • July 2018
  • May 2018
  • March 2018
  • February 2018
  • January 2018
  • October 2017
  • August 2017
  • July 2017
  • June 2017
  • May 2017
  • April 2017
  • March 2017
  • February 2017
  • January 2017
  • November 2016
  • August 2016
  • July 2016
  • June 2016
  • January 2015
  • December 2014
  • November 2014
  • October 2014
  • September 2014
  • July 2014
  • June 2014
  • May 2014
  • April 2014
  • March 2014
  • February 2014
  • January 2014
  • October 2013
  • September 2013
  • August 2013
  • July 2013
  • June 2013
  • May 2013
  • April 2013
  • March 2013
  • February 2013
  • January 2013
  • December 2012
  • November 2012
  • October 2012
  • September 2012
  • August 2012
  • July 2012
  • June 2012
  • May 2012
  • April 2012
  • March 2012
  • February 2012
  • January 2012
  • December 2011
  • November 2011
  • September 2011
  • January 2011
  • December 2010
  • November 2010
  • October 2010
  • September 2010
  • August 2010
  • July 2010
  • June 2010
  • May 2010
  • April 2010
  • March 2010
  • February 2010
  • January 2010
  • November 2009
  • October 2009
  • September 2009
  • August 2009
  • July 2009
  • June 2009
  • April 2009
  • March 2009
  • February 2009
  • January 2009
Proudly powered by WordPress
loading Cancel
Post was not sent - check your email addresses!
Email check failed, please try again
Sorry, your blog cannot share posts by email.
%d bloggers like this: