Microsoft Dynamics CRM 2011 continuously prompts for credentials when it attempts to access a web resource
This article describes a problem when you access Microsoft Dynamics CRM 2011, you're continuously prompted with credentials when Microsoft Dynamics CRM is trying to access web resources.
Applies to: Microsoft Dynamics CRM 2011
Original KB number: 2536453
Symptoms
When you access Microsoft Dynamics CRM 2011, you're continuously prompted with credentials when Microsoft Dynamics CRM is trying to access web resources.
Cause
Kernel mode authentication within Internet Information Systems is disabled for the Microsoft Dynamics CRM website.
Resolution
Kernel mode authentication must be enabled. In situations where you require the use of SPNs, such as Load Balancing, you must modify the applicationHost.config file to useAppPoolCredentials
. To correct this issue, go through the following steps:
Enable Kernel-mode authentication.
- On the Microsoft Dynamics CRM server(s), open up IIS Manager:
- Start > Run: inetmgr.
- Expand SERVER > Sites.
- Select Microsoft Dynamics CRM.
- Within the Features view, double-click on Authentication.
- Right-click on Windows Authentication and go to Advanced Settings.
- Check Enable Kernel-mode authentication.
- Select Ok.
- Close IIS Manager.
Modify the applicationHost.config file for IIS to
useAppPoolCredentials
:On the Microsoft Dynamics CRM server(s), go to:
%SystemDrive%/Windows/System32/inetsrv/config
Make a backup of the applicationHost.config file.
Edit the applicationHost.config file with NotePad.
Modify the
system.webServer
tag to includeuseAppPoolCredentials
:<system.webServer> <security> <authentication> <windowsAuthentication enabled="true" useKernelMode="true" useAppPoolCredentials="true" /> </authentication> </security> </system.webServer>
Note
There are a lot of different
system.webServer
references within the applicationHost.config file. To determine which element you should be modifying, load the applicationHost.config file in Visual Studio. Then compress all of the elements under <configuration>, so you can see all of the main elements:Expand the system.webServer element and make your modifications within here.
Set the proper SPNs for the Service Account running the CRMAppPool.