Dynamics 365 F&O/AX Dynamics 365 CE / CRM Dynamics GP Business Central / NAV UG Dynamics SL Power Platform Fabric UG MS Copilot UG

[David Morinello]

Can anyone help me past this latest sticking pointing in a new test install of the GP 2016 R2 Client.
– Scaled-out with one Web Client Server and one Session Server.
– No Certificate errors for the SessionCentralService or SessionService URLs
– All services are running.
– All restarted.
– IIS Reset
– Domain Account (and local server admin) for the GP Session Central Service on the Web Client Server
– Domain Account (and local server admin) for the GP Session Services Service on the Session Server

——————————
David Morinello
Senior Dynamics GP Systems Architect
Ascend Learning, LLC
Leawood KS
——————————

[David Morinello]

Well, there were no Event logs errors last night while looking at that Web Client screen hang, but this morning I see errors in both the Web Server’s Dynamics Event log, and in the Session Server’s Dynamics Event log.

I do not know what more right’s I can give to this AD account on the two servers. Is there something missing in how the AD account was created, or am I missing some step on the two servers?

Web Client
This errors 8 times. No pattern I can see to the time spacing. 4 in the 4pm hour, 2 in the 5 pm hour, skip to 1 in the 9pm hour and 1 in the 10 pm hour. all while I was offline.
Source:Microsoft.Dynamics.GP.Web.Services.SessionCentralService

An unauthorized attempt to call the ReportSessions operation on Session Central was made by domainxxxxxxx. (Note, this is a Domain Account and local server admin) for the GP Session Central Service on the Web Client Server)

Session Server
Source: Microsoft.Dynamics.GP.Web.Services.SessionService
An error occurred during session monitoring: ‘System.ServiceModel.FaultException`1[System.ServiceModel.ExceptionDetail]: The user is not authorized to call this service operation. (Fault Detail is equal to An ExceptionDetail, likely created by IncludeExceptionDetailInFaults=true, whose value is: System.InvalidOperationException: The user is not authorized to call this service operation.   at Microsoft.Dynamics.GP.Web.Services.Session.Service.SessionCentralService.ValidateCallerIsMemberOf(String principalCollectionKey)    at Microsoft.Dynamics.GP.Web.Services.Session.Service.SessionCentralService.ReportSessions(SessionHostStatus sessionHostStatus, IEnumerable`1 sessionsToReport)    at SyncInvokeReportSessions(Object , Object[] , Object[] )    at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]& outputs)  at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc& rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc& rpc)    at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage11(MessageRpc& rpc)    at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperati…).’.

——————————
David Morinello
Senior Dynamics GP Systems Architect
Ascend Learning, LLC
Leawood KS
——————————
——————————————-

[Beat Bucher]

Hi David,
might be a shot in the dark, but make sure the service account you’re running the GP Web service has proper policy permissions on the server (logon as a service and/or logon locally)..

——————————
Beat Bucher
Business Analyst, Dynamics GP MVP
Ultra-Electronics Forensic Technology Inc.
Montreal QC/Canada
+1-514-489-4267
@GP_Beat http://dyngpbeat.wordpress.com/
Montreal QC GPUG Chapter Leader
GP2013R2 / MR2012 CU14
——————————
——————————————-

[David Morinello]

I have asked the question and others of our network people, but have not heard back yet.

In the mean time, I did a complete uninstall of the web pieces on both the Session Host and Session Server, removed the database, then reinstalled all. Still I get various errors related to that one AD account.

• An unauthorized attempt to call the GetWebsiteSecurityGroups operation on Session Central was made by AXXXXXXASC-xxxxxx.
• An unauthorized attempt to call the ReportSessions operation on Session Central was made by AXXXXXXASC-xxxxxx.
• An unauthorized attempt to call the GetActiveSessionsForAllUsers operation on Session Central was made by AXXXXXXASC-xxxxxx.

Before I can open a ticket on this, I am supposed to exhaust all other avenues in-house. I might be there now.

——————————
David Morinello
Senior Dynamics GP Systems Architect
Ascend Learning, LLC
Leawood KS
——————————
——————————————-

[Beat Bucher]

David,
Did you start the Web installl with a brand new SQL database ? this had bit me in past as I had issues with re-installing or upgrading the web client, and I was told by Mariano to just delete the existing Web client DB and create a new one.. Worked on the 1st shot.

——————————
Beat Bucher
Business Analyst, Dynamics GP MVP
Ultra-Electronics Forensic Technology Inc.
Montreal QC/Canada
+1-514-489-4267
@GP_Beat http://dyngpbeat.wordpress.com/
Montreal QC GPUG Chapter Leader
GP2013R2 / MR2012 CU14
——————————
——————————————-

[David Morinello]

I started from scratch on Friday and am still running into some kind of access issue. My Domain guy says the AD account is set correctly

I did a complete uninstall, cleanup and reinstall of the pieces and still see errors related to that AD account. New DB.

– an unauthorized attempt to call the GetWebsiteSecurityGroups operation on Session Central was made by
AXXXXXXASC-xxxxxx.
– An unauthorized attempt to call theReportSessions operation on Session Central was made by AXXXXXXASC-xxxxxx
– An unauthorized attempt to call theGetActiveSessionsForAllUsers operation on Session Central was made by
AXXXXXXASC-xxxxxx

Is there anything in these “operations” that might point me in the right direction?

I am diving into SysInternals tools now. Process Explorer drilled to “Microsoft.Dynamics.GP.ServiceHost.exe” shows User as <access denied>.

Again, to test,  this AD account is set up in both the Web Client & Session servers as a local Admin, on the SQL server as sysadmin.

——————————
David Morinello
Senior Dynamics GP Systems Architect
Ascend Learning, LLC
Leawood KS
——————————
——————————————-