Change the CRMAppPool Identity

Most likely this is recorded in a thousand places, but I had a hard time finding info about what steps need to be taken to change the identity of the CrmAppPool. All you need to do is:
- Create a user in Active Directory
- Make sure the user has Domain User rights
- Add the user to the PrivUserGroup of CRM
- Make sure the user has 'log on as a service' priviledge

The last step can be executed on two approaches:
- Go to 'Local Security Policy' in the administrative tools ('Domain Controller Secuirty Settings' on a Domain Controller) and add the user to 'Log on as a service'
- Add the user to the CRM_WPG group in AD. This group is member of the 'Log on as a service' policy.

Hope this saves you some time, at least now that I have this documented here I can find it back *smile*

4 comments:

  1. James KentMay 05, 2009 9:14 AM

    Hi,

    I have been working on an auditing plugin for CRM 4.0 and have made it available via Codeplex.

    See http://crmaudit.codeplex.com/

    I couldn't find an email address so sorry about the irrelevant comment.

    Cheers,
    James

    ReplyDelete
  2. RRaveJune 07, 2009 12:41 PM

    Dear Sir,

    I have a launched new web site for .NET programming resources. www.codegain.com. I would like to invite to the codegain.com as author and supporter. I hope you will joins with us soon.

    Thank You
    RRaveen
    Founder www.codegain.com

    ReplyDelete
  3. Shweta-AmolJuly 04, 2009 2:36 PM

    Ping back from http://mscrmkb.blogspot.com/2009/07/change-identity-of-crm-apppool.html

    ReplyDelete
  4. Mira GhalyJuly 28, 2009 6:29 PM

    when i changed the identity of the CRMappPool the CRM gives me error "Access is denied"

    ReplyDelete

Note: Only a member of this blog may post a comment.