Dynamics CRM 2016 OnPremises: Error “Access is denied” when importing (asynchronous) solutions

Recently, a customer tried to install proRM but, even though they had the security role System Administrator, kept encountering the following error:

„An error occured while importing a solution – Access is denied“

2016-03-30 15:29:37,372 [11] INFO  proRM Set-Up Wizard [(null)] – Starting installation proRM Tracking

2016-03-30 15:29:47,965 [11] ERROR proRM Set-Up Wizard [(null)] – An error occured:

Import failed with error code -2147187707

Mesage:

Unhandled Exception: System.ServiceModel.FaultException`1[[Microsoft.Xrm.Sdk.OrganizationServiceFault, Microsoft.Xrm.Sdk, Version=8.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35]]: Access is denied.Detail:

<OrganizationServiceFault xmlns:i=”http://www.w3.org/2001/XMLSchema-instance” xmlns=”http://schemas.microsoft.com/xrm/2011/Contracts”>

  <ErrorCode>-2147187707</ErrorCode>

  <ErrorDetails xmlns:d2p1=”http://schemas.datacontract.org/2004/07/System.Collections.Generic” />

  <Message>Access is denied.</Message>

  <Timestamp>2016-03-30T13:29:47.0048359Z</Timestamp>

  <InnerFault>

    <ErrorCode>-2147187707</ErrorCode>

    <ErrorDetails xmlns:d3p1=”http://schemas.datacontract.org/2004/07/System.Collections.Generic” />

    <Message>Access is denied.</Message>

    <Timestamp>2016-03-30T13:29:47.0048359Z</Timestamp>

    <InnerFault>

      <ErrorCode>-2147220970</ErrorCode>

      <ErrorDetails xmlns:d4p1=”http://schemas.datacontract.org/2004/07/System.Collections.Generic” />

      <Message>System.UnauthorizedAccessException: Microsoft Dynamics CRM has experienced an error. Reference number for administrators or support: #1E35C4F9</Message>

      <Timestamp>2016-03-30T13:29:47.0048359Z</Timestamp>

      <InnerFault i:nil=”true” />

      <TraceText i:nil=”true” />

    </InnerFault>

    <TraceText i:nil=”true” />

  </InnerFault>

  <TraceText i:nil=”true” />

</OrganizationServiceFault>

at Microsoft.Crm.Extensibility.OrganizationSdkServiceInternal.Execute(OrganizationRequest request, CorrelationToken correlationToken, CallerOriginToken callerOriginToken, WebServiceType serviceType, Boolean checkAdminMode, ExecutionContext executionContext)

at Microsoft.Crm.Extensibility.InprocessServiceProxy.ExecuteCore(OrganizationRequest request)

at Microsoft.Crm.Asynchronous.ExecuteSdkMessageOperation.InternalExecute(AsyncEvent asyncEvent)

Step by step: how to solve the “Access denied” error

After some research, I found a TechNet article entitled “Security considerations for Microsoft Dynamics CRM 2016” and with it the solution to this issue.

1. First, the domain service account for the Dynamics CRM ASYNC service must be identified on the CRM (back end) server.

2. Second, adjust the NFTS authorizations for the „CustomizationImport“ library in the Dynamics CRM program files library.

3. Here, the domain user from step #1 is added and authorized with reading and writing permissions for the library.

4. Now the solution import will work without any issues.