Resolving some issues when upgrading from CRM 3.0 to CRM 4.0

I was recently upgrading an environment from CRM 3.0 to CRM 4.0 and ran into an IIS issue.  The CRM 4.0 wizard performed its environment checks.  I was presented with an IIS error that stated "The Web site's NTAuthenticationProviders must be Negotiate,NTLM."  A quick look at the log file was not much more helpful.  It stated "Error| Check NTAuthenticationProvidersValidator : Failure: The Web site's NTAuthenticationProviders must be Negotiate,NTLM.
The parameter "NTAuthenticationProviders" is not set at this node."

To resolve this, the NTAuthenticationProviders value to needs to be set to "Negotiate,NTLM".  To check this value, perform the following actions.
1. On the IIS server, click on Start, select Run, type in CMD and press Enter.
2. Switch to the Adminscripts directory by typing cd\ and pressing enter.  Then type "cd inetpub\adminscripts" and press enter.  This is the default location for the scripts.
3. Determine the number identifier for your website by opening IIS and selecting the "Web Sites" node.  On the right you will see the Identifier column to the right of each Description.  My Microsoft Dynamics CRM website identifier was 1.
4. Go back to the DOS window and type the following command:
cscript adsutil.vbs get w3svc/1/root/NTAuthenticationProviders
You should get back - NTAuthenticationProviders: (STRING) "Negotiate,NTLM".  In my case, the statement returned - The parameter "NTAuthenticationProviders" is not set at this node.  When the value is not set, it should default to "Negotiate,NTLM" but I was still having the issue.
5. To set that value, type the following command:
cscript adsutil.vbs set w3svc/1/root/NTAuthenticationProviders "Negotiate,NTLM"
To validate that it was set I ran the "GET" command and verified it was set.
6. At this point you need to reset IIS.  Be warned that if anyone is using any of the websites running with this IIS, they will get dropped.  In the DOS window, type IISRESET and press enter.
7. Unfortunately for me, I still received the error.  The next step was to check what the NTAuthenticationProviders value was one level up so I ran the following command:
cscript adsutil.vbs get w3svc/1/NTAuthenticationProviders
The value for NTAuthenticationProviders was set here but it was set to
"Negotiate, NTLM" and the issue with that is there is a space after the comma.  I set the value by running this command:
cscript adsutil.vbs set w3svc/1/NTAuthenticationProviders "Negotiate,NTLM"
and then ran the IISRESET command.

Problem solved!

Comments

[Çet]

[...] glaube ich habe schon gefunden was ich nicht wollte ….: Step-by-Step: Configuring a 2-node multi-site cluster on Windows Server 2008 R2 ? Part 3 Clustering … Ich bin davon ausgegangen, dass ich die Datenbanken mit Boardmittel replizieren kann. Aber um [...]

[Gmoore]

Have you ever had a time when after performing a customization CRM would lock up for Outlook CRM client users and require an IIS reset to be performed?