mscrm-addons.com - Blog

IMPORTANT INFORMATION

This blog is deprecated since July 2020.The articles below are no longer maintained and might contain outdated information. 
You can find the most acutal and relevenat information in our Knowledge Base at support.mscrm-addons.com

News.mscrm-addons.com Blog

rss

Hello and welcome to our blog! What can we do for you? Are you looking for further technical information or step-by-step instructions to our products? Or would you like to read the latest news on mscrm-addons? Please feel free to browse our blog for detailed information and to share our posts!


Additional Steps for DCP 2011 Directory Security

With the Directory Security Feature of DocumentsCorePack for MS CRM 2011, you can prevent users to see certain files from CRM records. Users will not be able to navigate to the associated directory within the file share or SharePoint because DocumentsCorePack will overtake the security for you. In short words: when a user is not able to see the CRM record, he/she will also not be able to see the documents.

For a detailed description, please have a look at the documentation.

However, you have to do additional steps for the Directory Security.

Each time a user accesses the documents through DocumentsCorePack, the user will be granted for this specific directory. Because it is possible that user privileges are changed, the user will not have permissions to see the CRM record anymore.

But the permissions are already granted. That is the reason why DocumentsCorePack resets the permission every night at 11pm (server time). But you have to specify a user under which the task should run. You have to do this manually.

To do so, please open the Windows Task Scheduler

Figure 1: Windows Task Scheduler


You'll see two tasks, the DCP FX-SPS Directory Security Resetter which is for FileExplorer and the DCP FX-SPS Directory Security Resetter sps, which resets the SharePoint Directory Security.

Per default, the tasks are running under the SYSTEM account which has not enough privileges to connect to CRM.

You need to specify a user which is able to read all organizations.

To do so, double-click the tasks and click on Change User or Group and specify a user which is able to connect to CRM.

Figure 2: Change user group

Now the directory security will be resetted every night to the default permissions.

That’s it! We appreciate your feedback! Please share your thoughts by sending an email to support@mscrm-addons.com.




Comments are closed.