Page 1 of 3312345678910...202530...Last »

You receive "You are not allowed to use Microsoft Dynamics GP. Please sign out and sign in with an authorized account" when accessing Web…

One of the cool things about Microsoft Dynamics GP 2015 is the new Web Client Identity Management feature. Having the ability to access Microsoft Dynamics GP with your Windows Directory or Windows Azure credentials without ever needing a SQL login account is just beautiful.

The Theory – Part 1: GP Utilities

The theory is fairly simple: you have a Microsoft Dynamics GP user account, which in turn is tied to a Windows Active Directory account or Windows Azure Active Directory account. User accounts are stored in the User Master table (dbo.SY01400) in the system database, which has been beefed up with a new column called Active Directory Object GUID (ADObjectGuid) to store the actual GUID of the directory or organizational account mapped to the GP user.

User Setup window

However, because Microsoft Dynamics GP continues to be dependent on SQL authentication for all intends and purposes, it continues to need a SQL login to be able to access the Dynamics GP database objects. This is where the new Web Client SQL Login user comes into play.

If you have done a new install of Microsoft Dynamics GP 2015, you would have noticed a new window called Manage Web Client SQL Server Login during the GP Utilities process. This window prompts for SQL credentials that will be used to access the SQL server database objects from Web Client.

Manage Web Client SQL Server Login window (GP Utilities)

If you are doing an upgrade, you will need to direct your attention to the drop-down list in the Additional Tasks window to find it — more on this later.

Additional Tasks window (GP Utilities)

When you enter the credentials in the Manage Web Client SQL Server Login window, the actual SQL Server security principal is created with the same password encryption at the database level. To understand more about this, read Why does Microsoft Dynamics GP encrypt passwords by David Musgrave over at Developing for Dynamics GP.

The Theory – Part 2: Web Client

When you are installing the Web Client itself, you are once again prompted to enter the Web Client SQL Server Login credentials. At this stage you MUST enter the same account information entered when you ran the GP Utilities.

This information is stored in the TenantConfiguration.xml file (in a single-machine instance) under the SessionCentral folder. The same information is used by the Service Based Architecture service (GPService service) to gain access to database resources, hence there’s also a TenantConfiguration.xml file (again, in a single-machine instance) under the GPService folder. These two folders can be located under your Program FilesMicrosoft DynamicsGP Web Components root folder.

Now that your AD or Organizational account is tied to your GP user account, when you launch the web client and your AD credentials are validated against IIS, a security token is created and passed on to Session Central service, which in turn spins up a runtime process passing on your AD account credentials in the GP Login window. The log in process itself will use the Web Client SQL Server login to access the system database and in particular the User Master table to validate the AD account GUID against the one stored in the table. If all matches, you are allowed access and from there on you go about your business.

The Problem

This brings us to the topic of this post…

As it turns out, during that handshake between Session Central and the Runtime service to pass off the AD credentials, I received the following error:

Further review of the Dynamics application and services log in Event Viewer, shows the following error:

System.Security.Cryptography.CryptographicException: Padding is invalid and cannot be removed.
   at System.Security.Cryptography.CapiSymmetricAlgorithm.DepadBlock(Byte[] block, Int32 offset, Int32 count)
   at System.Security.Cryptography.CapiSymmetricAlgorithm.TransformFinalBlock(Byte[] inputBuffer, Int32 inputOffset, Int32 inputCount)
   at System.Security.Cryptography.CryptoStream.FlushFinalBlock()
   at System.Security.Cryptography.CryptoStream.Dispose(Boolean disposing)
   at System.IO.Stream.Close()
   at Microsoft.Dynamics.GP.Web.Foundation.AesCryptographer.Decrypt(String value)
   at Microsoft.Dynamics.GP.Web.Services.Session.TenantServiceXmlHandler.ResolveTenantPasswords(Tenant tenant)
   at Microsoft.Dynamics.GP.Web.Services.Session.TenantServiceXmlHandler.GetTenantDetails(String identity, String tenantName)
   at Microsoft.Dynamics.GP.Web.Services.Session.Service.SessionCentralService.CreateSession(String tenantName, UserContext userContext)

Typically, any Crypto exception is directly related to credentials. So I traced back my steps after the upgrade and realized I had created the Web Client SQL server login account manually — after all, I had not seen the option in the GP Utilities drop down to do so. Of course, this would mean that the password was un-encrypted on SQL server and wouldn’t match the password stored in the TenantConfiguration.xml file. In retrospect, had I even used GP Utilities to setup the account and entered a different password from the one I entered during the Web Client install, I would have received the same error.

The Solution

Knowing that in essence what I had was a password mismatch between the value stored in TenantConfiguration.xml and the password at the SQL Server level, I decided to make things simple and removed the database user (sp_dropuser) corresponding to the security principal and the actual security principal (sp_droplogin) then re-launched GP Utilities and created the account once more, this time making sure the password matched what I had entered when installing the Web Client.

Once I launched the Web Client and entered my Windows credentials information, I was able to experience the beauty of single sign-on all the way to the company database I had selected as my default company.

Also, it is worthwhile to mention that Service Based Architecture was failing validation, but I will address this in my next article.

Acknowledgements

I want to thank Chris Rudolph with the Microsoft Dynamics GP Software Engineering team for his valuable insight into working through this issue. Chris also helped me with understanding some deep architecture stuff that I will be presenting in a future related article to this one.

Until next post!

MG.-
Mariano Gomez, MVP
Intelligent Partnerships, LLC
http://www.intelligentpartnerships.com/

Read More:
You receive "You are not allowed to use Microsoft Dynamics GP. Please sign out and sign in with an authorized account" when accessing Web…

March 12, 2015 · Mariano Gomez · No Comments
Tags: , , , , , , , ,  · Posted in: Blogs I Follow Total Views: 31

How to disable "Checking for newer builds" message in Rockton software products

Given the well-deserved popularity of Rockton Software’s (http://www.rocktonsoftware.com/) products, such as ‘SmartFill’ and ‘The Dynamics GP Toolbox’, it has come to my attention that it checks for newer builds each time you sign in. Kind of like the ‘Welcome to Dynamics’ trill from years ago, this can get annoying. Fortunately, Rockton has addressed this issue and published the following KB article to address it.

Jim Moore, at Wesco Valve and Manufacturing Company (www.sswesco.com) was kind enough to send me the article below: 

Issue:
Disabling the “Checking for newer builds…” message. Note: This setting is user-specific.

Option 1.

To disable this feature, go through the following steps:

  1. Click on the Help icon in the upper-right corner of GP.
  2. Select Rockton Software Support at the bottom of the list.
  3. On the menu, click Settings >> Rockton Software Preferences.*
  4. Under the User-specific settings section, bring up the individual user for whom you want to change the setting.
  5. Unmark the Enable check for newer builds at the login for each user that doesn’t want to have that process run.

Note: These settings are stored in a table in the DYNAMICS database, so you don’t need to do this at each workstation.

*Step 3, the path may vary. It may be Rockton Software Support | Preferences | Rockton Global Settings.
Note: All users will be marked by default but the check for newer builds will only appear for PowerUsers and users assigned to the Administrator role for Rockton Software products within Security. If you use Auditor, then it is based on those users you marked as Admins. in the Auditor System Settings window.
Option 2.
To do a mass update on the table that the information is stored in, you can run the following script in SQL Management Studio.  You can then view what the values are for that particular setting in the RS_Global_Setting_Value column (1 = Enabled and 0 = Disabled)**. Be sure to have a backup made prior to running the script.

USE DYNAMICS

UPDATE RSIGLOBL SET RS_Global_Setting_Value = 0 WHERE RS_Global_Setting_Key = ‘EnableNewerBuildCheck’

More Information:
When you install any Rockton product after turning this off, you will receive a prompt at the end of the install to re-enable the setting if it has been disabled. 
**It is recommended that you leave at least one person enabled, so that they are notified when a new build is available.

Continue reading here:
How to disable "Checking for newer builds" message in Rockton software products

February 19, 2015 · Leslie Vail · No Comments
Tags: , , , , , , , , , ,  · Posted in: Blogs I Follow Total Views: 31

Microsoft Super Bowl XLIX Commercials: #Empowering

Super Bowl XLIX is now over and congratulations are in order for the now 4-time champion, the New England Patriots organization led by head coach Bill Belichick and quarterback Tom Brady. I must also extend congrats to the Seattle Seahawks who put up quite the fight until the end, and simply could not complete the rare feat of a back-to-back championship.

You can catch the game highlights below:

And speaking of winners, how about those touchy Microsoft #Empowering Super Bowl commercials (remember Super Bowl XLVIII ones?) Microsoft came up with two real life examples showing where their technology is being applied to improve the lives of people. You be the judge of these two ads.

Braylon O’Neill’s story

Microsoft Super Bowl Commercial 2015: Braylon O’Neill   

Braylon was born with a strong sense of determination. He was also born without the two bones that make up the lower leg: the tibia and the fibula.

At just 11 months old, Braylon was fitted with his first prosthesis. His doctors use technology to track his gait mechanics and make adjustments that maximize his strength and performance. Braylon is now an unstoppable speed demon – in races with CAF (Challenged Athletes Foundation) he has taken home medals and inspires others to reach beyond their limits

Estella Pyfrom’s story

Microsoft Super Bowl Commercial 2015: Estella’s Brilliant Bus

Estella Pyfrom could have chosen to enjoy a nice quiet retirement. Instead, she had an idea that would change her life and the lives of thousands of families.

At the age of 71, Estella decided to spend her life savings and build a bus to bring technology to underserved communities. Today, Estella’s Brilliant Bus has helped more than 60,000 children gain access to technology and envision a bigger, brighter future for themselves.

Click to find out more about Microsoft #Empowering. Catch more Super Bowl XLIX videos on the NFL’s YouTube Channel.

Until next post!

MG.-
Mariano Gomez, MVP
Intelligent Partnerships, LLC
http://www.intelligentpartnerships.com/

Follow this link:
Microsoft Super Bowl XLIX Commercials: #Empowering

February 2, 2015 · Mariano Gomez · No Comments
Tags: , , , , , , , , , , ,  · Posted in: Blogs I Follow Total Views: 40

Welcome to the Microsoft Dynamics GP Engineering Team blog

Now, here’s something you don’t see every day: in the trench software development and testing engineers having time to write anything other than code. Well, the Microsoft Dynamics GP Engineering Team (consisting of the Development Engineering and Testing teams) have decided to break their ‘silence’ (so to speak) to pick up their digital pens and deliver some awesome content.

From this group you can expect content around the inner works of Service Based Architecture, Workflow and myriads of other engineering topics.

If you are an avid Microsoft Dynamics GP development engineer, a Microsoft Dynamics GP ISV, a technical consultant looking to propel your knowledge to new heights, then this new resource is for you! Expect coverage from folks like Alice Newsam, Rob Anderson, Michael Hammond, Chris Rudolph, Yuri Mikeev and others.

Below please find the link to the Dynamics GP Engineering Team Blog:

Dynamics GP Engineering Team Blog

Until next post!

MG.-
Mariano Gomez, MVP
Intelligent Partnerships, LLC
http://www.intelligentpartnerships.com/

Disclaimer: the above banner is not an official Microsoft or Microsoft Dynamics GP Engineering Team logo and was created solely for the purpose of bringing attention to the team’s new Community site.

View post:
Welcome to the Microsoft Dynamics GP Engineering Team blog

January 20, 2015 · Mariano Gomez · No Comments
Tags: , , , , , , , , , , ,  · Posted in: Blogs I Follow Total Views: 35

First reason to attend Microsoft Dynamics Convergence 2015: Satya Nadella

It’s that time of the year again. While we prepare to celebrate the holidays, be it Christmas, Hanukkah, Milad un Nabi, or simply enjoy a good time off with family and friends, it is also time to begin thinking about 2015.

The next major event in sight, of course, is Microsoft Dynamics Convergence 2015 Atlanta and who better to open the event that Microsoft’s newly minted Chief Executive Officer, Satya Nadella.

Satya Nadella

Before being named CEO in February 2014, Nadella held leadership roles in both enterprise and consumer businesses across the company.

Joining Microsoft in 1992, he quickly became known as a leader who could span a breadth of technologies and businesses to transform some of Microsoft’s biggest product offerings.

Most recently, Nadella was executive vice president of Microsoft’s Cloud and Enterprise group. In this role he led the transformation to the cloud infrastructure and services business, which outperformed the market and took share from competition. Previously, Nadella led R&D for the Online Services Division and was vice president of the Microsoft Business Division.

Before joining Microsoft, Nadella was a member of the technology staff at Sun Microsystems. Originally from Hyderabad, India, Nadella lives in Bellevue, Wash. He earned a bachelor’s degree in electrical engineering from Mangalore University, a master’s degree in computer science from the University of Wisconsin – Milwaukee and a master’s degree in business administration from the University of Chicago. He is married and has three children.

Fun facts about Satya Nadella

1. The guy loves Cricket! He attributes his ability to work in a team and his team building spirit to the sport.

2. He is an avid computer-based training (CBT) student and does take online classes most every morning in a 15-minute window.

3. He’s a family man at heart. He’s been married for a little more than 22 years and has 3 kids.

4. Poetry is his thing. Likes American and Indian poetry.

5. He’s just Microsoft’s 3rd CEO, behind Bill Gates and Steve Ballmer.

*Fun facts courtesy of IndiaTimes.

So, what are you waiting on? Register now for Convergence and come enjoy an opening keynote session that will also feature the one and only Kirill Tatarinov, Executive VP of the Microsoft Business Solutions Group who in his own style will sure make you excited about the future.

Until next post!

MG.-
Mariano Gomez, MVP
Intelligent Partnerships, LLC
http://www.intelligentpartnerships.com/

See the article here:
First reason to attend Microsoft Dynamics Convergence 2015: Satya Nadella

December 19, 2014 · Mariano Gomez · No Comments
Tags: , , , , , , , , ,  · Posted in: Blogs I Follow Total Views: 81

Working with Dex.ini Settings to customize the Microsoft Dynamics GP Connect gadget

I take a pause in my Microsoft Dynamics GP 2015 Developer’s preview series to bring something fun before the Thanksgiving holiday here in the United States. Hopefully you find this trick very cool and enjoy it in your workplace.


Have you ever wanted to wake up with The Dynamics GP Blogster page as the centerpiece of your Microsoft Dynamics GP application homepage? Or how about your favorite online news outlet? What if you just want to display your company web page or an intranet portal to allow employees to update their information or view the latest company news?

Today I will show you how to take advantage of two obscure Dex.ini settings to customize the Connect gadget.

The standard Connect gadget displays Microsoft Dynamics Community news and updates, but there are two Dex.ini keys used to enable runtime debugging of the Connect gadget. One of the Dex.ini keys turns on the debugging feature and the other allows you to specify a URL to be displayed. The keys are:

DebugConnect=TRUE
ConnectTestURL=http://dynamicsgpblogster.blogspot.com

If you add these two keys to your Dex.ini file and re-launch Microsoft Dynamics GP the result will jump right at you.

Customized Connect Gadget

I also noticed that if the customized URL contains videos, these will play fine within the Connect gadget. How about that for some educational YouTube videos from the Microsoft Dynamics Channel? I tested it in the Web Client and it also worked just fine.

Please send in your comments as I would like to hear how you plan to use these new settings. Also remember, if you are using the Support Debugging Tool, you can roll out the settings to every user without having to visit their workstations.


Take a look at the following related articles:

Working with the Dex.ini Settings in Microsoft Dynamics GP 2013
More DEX.INI Settings!

Until next post!

MG.-
Mariano Gomez, MVP
Intelligent Partnerships, LLC
http://www.intelligentpartnerships.com/

Original post:
Working with Dex.ini Settings to customize the Microsoft Dynamics GP Connect gadget

November 26, 2014 · Mariano Gomez · No Comments
Tags: , , , , , , , ,  · Posted in: Blogs I Follow Total Views: 65

Microsoft #reIMAGINE 2014 Conference – Getting Here

Typically, there’s nothing exciting about a flight between Atlanta – Minneapolis – Fargo, except this time, I was able to appreciate the art exhibit displayed between T gates and concourse A at Hartsfield-Jackson Atlanta International airport.

Foreground: TRAVELING FAMILYBy Amos Supuni
Born 1970 Malawi

Background: GALACTIC DANCERTapfuma Gutsa
Born 1956 Harare, Zimbabwe

This permanent collection of twenty contemporary stone sculptures from Zimbabwe debuted in 2001 and is one of the largest publicly owned and exhibited collections of its kind. Located in the pedestrian corridor of the Transportation Mall between the T Gates and Concourse A, it features twelve of Zimbabwe’s top artists. Though the Art Program chose these sculptures for their intrinsic beauty, the themes explored by the artists also seem universal. The works delve into the importance of family, humanity’s relationship with nature and desire to be spiritually connected. The Art Program hopes that these common themes resonate with passengers of all backgrounds.

AT ONE WITH NATUREBy Gladman Zinyeka
1962-2000 Gutu district, Zimbabwe

To create each piece the talented Zimbabwean artists skillfully hand-carved the stone to rough out the initial form without the use of power tools. Next the artists smoothed out select surfaces with sandpaper. Wax was applied to some of the surfaces to create contrasting textures that enhance the work’s beauty and emotive qualities.

WHO WILL RAISE THE CHILDBy Gladman Zinyeka
1962 – 2000 Gutu district, Zimbabwe

One of my favorite sculptures is “Who will raise the child” by Gladman Zinyeka. The mother, father and child in “Who Will Raise the Child” lament the AIDS epidemic that leaves many children without parents. Thematically, Zinyeka’s sculptures often meditate on the socio-economic effects of displacement and urbanization, as well as ecological issues.

Picture of tribal village

While they are hundreds of pictures lined up on each wall of the corridor, this village caught my attention as the colors are so intense and the intrinsic and elaborate designs on each of the homes is impressive.

PROTECTING SPIRITBy Sylvester Mubayi
Born 1942 Chiota reserve, Zimbabwe

In “Protecting Spirit,” a spiritual presence with human form stands guard over children protecting them from harm. With the eye placed in the figure’s hand, Mubayi has created a powerful totemic presence that speaks to the mystery of the spiritual world. Expressing the spirit world and its connectedness to Zimbabwean culture is very important to Mubayi. As with most of Mubayi’s work, he used the very hard Springstone for this piece.

Atlanta Bread & Bar

After enjoying the art exhibit, it was time for a beer and some food. This time my choice of spot was the Atlanta Bread and Bar, located next to gate A12, which offers a local experience in a fun and sophisticated atmosphere with delicious food and a full service bar which carries premium and local brands for beer, wine and specialty cocktails. The menu features Atlanta Bread Company fresh soups and made to order sandwiches along with Panini which are served on a variety of daily baked breads. The bar offers an extended menu of appetizers, salads and entrees, including Shrimp and Grits, Steak with Chimichurri Sauce and Chicken Breast with Gouda Grits and Collard Greens. If you ever transiting through concourse A in the morning, they also offer a full service breakfast menu with French toast, omelets, steel cut oatmeal and more!

My flight left at 7:15 PM and had me in Minneapolis at 9:00 PM with only 40 minutes between flights. Fortunately, the flight left from concourse G, which is located next to concourse F, so it was only a 5 minute walk between the arrival gate and the departure gate. Onboard the flight to Fargo, I had a chance to sit next to Cheri Schoenfish, HR Director for the Skype team at Microsoft – and Errol’s better half.

Cheri and I on board our flight from MSP to FAR

Upon arriving in Fargo, the scenery changed from endless pictures and sculptures to one of heavy equipment vehicles, small bobcats, and the mother of them all, this all terrain snowmobile – or would this be a SASM (Sport Activity Snowmobile)

Snowmobile at Hector International in Fargo, ND

Errol and Cheri were extremely welcoming and kind to offer a ride from the airport to the Holiday Inn, where I will be staying for the duration of the conference. Being it was late, it was time to go to bed to get some rest after check in.

Until next post!

MG.-
Mariano Gomez, MVP
Intelligent Partnerships, LLC
http://www.intelligentpartnerships.com/

See the original post:
Microsoft #reIMAGINE 2014 Conference – Getting Here

November 10, 2014 · Mariano Gomez · No Comments
Tags: , , , , , , , , , ,  · Posted in: Blogs I Follow Total Views: 52