We have several Azure MVPs & soon to be MVPS signed up to be your first panel for our upcoming Azure Medic Webinar on October 25th. Let’s introduce them here and make sure to follow them on twitter for additional content! I will be your host and moderator for these web events. More details and future webinar dates can be found on our Facebook page here: https://www.facebook.com/groups/1033129676804625/
Greg Leonardo https://twitter.com/gleonardo
Kevin D. Wolf https://twitter.com/ByteMaster
Santoash Hari https://twitter.com/_s_hari
Scott Dorman https://twitter.com/sdorman
When trying to upload a solution with more than the maximum number of dashboard components.
Message: “The Dashboard that you are trying to save has more components than the maximum number allowed. Remove some components and try again.”
To resolve this issue, you can increase the Dashboard limit using Power
1. Retrieve and set the dashboard limit
- Open a Windows PowerShell command window
- Add the Microsoft Dynamics CRM Windows PowerShell snap-in:
2. Add-PSSnapin Microsoft.Crm.PowerShell
3. Retrieve the current setting:
$setting = Get-CrmSetting -SettingType DashboardSettings
4. Modify the current setting:
$setting.MaximumControlsLimit = 10
Set-CrmSetting -Setting $setting
An error occurred. Contact your administrator for more information” error when accessing CRM with ADFS/IFD set up.
After completing ADFS/IFD setup where ADFS is installed on a Windows Server 2012 R2 machine, you receive the below error:
To resolve this issue you must enable Forms Authentication:
1. Connect to the ADFS server
2. Open the ADFS management console and click Authentication Policies
3. Under Primary Authentication, click Edit next to Global Settings
4. Put a check mark in the Forms Authentication option on the Extranet and Intranet sections
5. Click OK
6. You should now be able to log in to CRM successfully
Thanks to Ian Holton, Client Field Engineer at Tribridge for putting this together!
Active Directory Federation Services (ADFS) performs a lot of tasks when it comes to authenticating users into CRM securely. One of those tasks in particular is a certification revocation check to validate that the certificates being used are still valid. ADFS completes this process by reaching out to certification revocation lists (CRLs) over TCP port 80 – basic HTTP communication.
What we’ve seen is that businesses will want to lock down their ADFS servers just to be on the “safe side” and that includes closing TCP Port 80 outbound (e.g. no internet access). If left in its default state, ADFS will break and cause authentication to fail as it knows that it is supposed to check the CLRs to validate the certificate before issuing a token to allow a user into CRM. If it cannot do this, it will not issue a token. You may see an error similar to the following in the ADFS event viewer logs after a failed authentication attempt:
Event ID: 364
Microsoft.IdentityServer.AuthenticationFailedException: MSIS3014: The encryption certificate of the relying party trust ‘https://crm.domain.com/’ identified by thumbprint ’01DEDF6E6F532BF7357457EBEC31DA82SFDA1234′ is not valid. It might indicate that the certificate has been revoked, has expired, or that the certificate chain is not trusted. —>
Microsoft.IdentityServer.Service.SecurityTokenService.RevocationValidationException: MSIS3014: The encryption certificate of the relying party trust ‘https://crm.domain.com/’ identified by thumbprint ’01DEDF6E6F532BF7357457EBEC31DA82SFDA1234′ is not valid. It might indicate that the certificate has been revoked, has expired, or that the certificate chain is not trusted.
So what are your options?
- Have your networking team open TCP 80 outbound on the ADFS server(s). This would also apply to all ADFS Proxies or WAP servers. While opening a port might seem less secure at face value it would actually be the opposite as ADFS is able to validate the certificates being used.
- The less preferred, but still acceptable, method would be turning off the Certificate Revocation Check of ADFS. The check is controlled individually for each relying party in ADFS so it would need to be turned off for all one by one. To do this open an admin PowerShell prompt and issue the following command:
Set-ADFSRelyingPartyTrust -TargetName <relyingpartytrustName> -EncryptionCertificateRevocationCheck None
Over the last few weeks my colleagues and fellow MVP’s have been working on a few CRM 2016 systems. Our general thought is that a lot of this code is from the CRM Online 2015 code base, and should really be production ready. However, the Microsoft CRM team has been hard at work delivering new features, so looks like we introduced a few bugs.
I’m going to recommend that you wait for update rollup 1 before deploying to your production system. There’s still plenty of time to test and install in your dev and test systems as you wait for these fixes. Here’s the main areas:
- Overall Outlook 2016 Client Configuration and Usage Issues – Support Recommended to stay with 2015 client
- New Form Rending Engine slowing overall form performance – fix in the works for update roll up 1
- Tweaks to the 2016 Solution Engine, breaking some backwards capability while importing solutions – fix in the works for update roll up 1
- Mobile Client performance issues
So we will re-test about the update roll-up 1 and provide future recommendations when we feel this is ready for production. Remember that there are some best practices and one is two wait until the first update roll-up is available. Stay tuned.
Join me at the CRMUG Summit In Reno NV. This is the premier Dynamics CRM Event of the year. Don’t miss out, not too late to register below.
Here’s my preliminary schedule. Please refer to the website!
Monday, October 12
Tuesday, October 13
Wednesday, October 14
Tribridge Customer Party – Invitation Only 7pm on..
Please contact me if your a customer or prospect and did not receive an invitation.
Thursday, October 15
Friday, October 16 – CANCLLED
Dynamics CRM Videos and eBooks are now available for Sales, Service, Social Listening, Mobile and upgrading. Take a look:
The Microsoft CRM team has been hard at work. They have just announced the availability of CRM 2015 for both CRM Online and CRM OnPremise. Don’t worry, this is not the same major upgrade from CRM 2011 to CRM 2013, but rather more like a CRM 2013 SP2/3 release.
As of I have stated before, CRM platform has hit a nice maturity level, in where the interface and back office are very stable, scalable, etc., a lot like ERP system updates. Now, we will see even more new features and innovation for CRM, built on the same common platform. Here’s some great links!
What’s new in CRM 2015:
Mobile Tablet Productivity Enhancements
CRM Customer Center:
CRM Online Upgrade Video
Videos and EBooks:
Hierarchical Security Modeling in Microsoft Dynamics CRM 2015
Mobile Tablet Productivity Enhancements
It’s that time of year again, when all the CRM User base gets together for the biggest CRM user group event of the year. CRMUG Summit is a great place to learn, network and do all things CRM! Some details to the event can be found here.
If you’re attending, see my schedule below. Stop by to ask a question or just say hello!
Dynamics Partner Conference Oct 13-14
CRMUG Summit 2014 October 15-17
Please note the 2:15 session has been moved to 8am that morning, giving you plenty of time to catch your flights.
I will be at both the MVP sessions.
Before you say not again!, CRM 2015 has been announced and should be available by years end. From my initial testing, I can tell you we have reached a very stable, almost turning point with our common CRM platform. Now, like the ERP systems, we are going to see functionality enhancements not system re-designs, while keeping the same interface with some small enhancements around performance and usability. Multi-entity search now available out of the box! 🙂
The CRM team has really delivered, and is keeping the momentum by delivering today. A great way to sum up this new releases to others, its like CRM 2013 R2, but since we had the time, we changed the name too! 🙂
Bob Stutz’s Blog:
Customer Center Get Ready Page: