Microsoft CRM IFD Users Unable to Access Help Files

When you configure Microsoft Dynamics CRM Internet Facing (IFD), users may be presented a Windows login dialogue box when they try to access the CRM Help menu.

They will not be able to log in with the login box, and they will get an "Access denied" error message.

To fix this issue, edit the Help virtual directory on the CRM web site to accept anonymous authentication.  In IIS MGR 6.0, expand Microsoft Dynamics CRM web site tree under the Web sites folder.  Right Click on "Help" and select properties

 

On the Directory Security tab, click "Edit" under the "Authentication and Access control" section

Click the checkbox to "Enable anonymous authentication."  Click OK.

That's it.  Now your IFD users can access help files.

 

Technorati Tags: Microsoft CRM,IFD,internet facing deployment,help files

Comments

[Dmitriy Ilyin]

And what about regestry setting?
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSCRM]
"AnonymousAccessToHelpVDir"="True"

Is it not the same?

[Joel Lindstrom]

Dmitriy,

it MAY be. I'm aware of the registry key; however, from my tests, changing it to True is not sufficient. In my tests, IFD users are still prompted for Windows login. I assume that is what it's there for, but it's not documented anywhere, and I haven't been able to make it work. I know that the approach that I describe works.
Have you made it work via registry change?

[Dmitriy Ilyin]

>>Have you made it work via registry change?
Joel,
It's seems to me i made those changes on my Windows 2008 along time ago and forgot about it :).
For my IFD deployment this regestry setting also does not have effect.

[maurog]

Hello! I have the same problem but I have anonymous access enabled and anyway, I still see the Windows login.
I can do?

[Joel Lindstrom]

If you still get windows login, you probably don't have IFD configured correctly. things I've seen for example are if your URL is different from your crm org name, or if the ip range exclusions entered in the IFD tool are the same as the IP range of your computer

[maurog]

I commented the situation. When I enter data into the login entered correctly the CRM windows but when I delete the URL and replace loader.aspx by signin.aspx login I get the CRM itself, re-entering the same data as before but it throws me error.
It can also be IFD configuration error?
The IP was configured in IFD's own server and router, with its respective subnet masks. One is the other Class A and Class C.

[Joel Lindstrom]

If you get a windows log in box, your ifd configuration is not complete. Another possibility is that you have ISA server, or some other firewall blocking you from the site.
Use the search box on the right side of the blog and search for IFD--I have some other posts about lessons learned from IFD and IFD with ISA.

[maurog]

Joel: I could spend the mail or I will spend my mail so that you can spend some screenshots of the errors I have.
If I can help, would be very important since I am new to the subject ...

Thanks!