Upgrade Dynamics CRM 2016 on-premise to Dynamics 365

Upgrade Dynamics CRM 2016 on-premise to Dynamics 365

Please find link below
https://support.microsoft.com/en-gb/help/3142345/microsoft-dynamics-365-onpremise-cumulative-updates

https://support.microsoft.com/en-in/help/3205084/december-2016-update-for-dynamics-365-online-and-on-premises

Please refer below URL
https://nishantrana.me/2018/10/05/upgrading-from-dynamics-crm-2016-on-premise-to-dynamics-365/

Remove/Hide the Assistance tab from Dynamics 365 CRM

Remove/Hide the Assistance tab from Dynamics 365 CRM

If you want to remove/hide the assistance tab in Dynamics 365 CRM. You can do either uncheck base cards from Settings->Sales AI->Assistance or do coding

In the Organizations entity set the "ispreviewenabledforactioncard" as false

Couldn’t import a Custom Control Default Config for ObjectTypeCode 10022 because its 'customcontroldefaultconfigid' already exists on the system.

Couldn’t import a Custom Control Default Config for ObjectTypeCode 10022 because its 'customcontroldefaultconfigid' already exists on the system.

Solution:

Solution:1

• Extract the solution file and open the customization.xml file 
• Remove the content/subnode tag in the "CustomControlDefaultConfigs" node <CustomControlDefaultConfigs> </CustomControlDefaultConfigs>
• save the file and zip it and import again in the CRM.

Solution:2

• Use the script below to find the oldest duplicated records on CustomControlDefaultConfigBase

select PrimaryEntityTypeCode, min(CreatedOn) oldest from CustomControlDefaultConfigBase

where PrimaryEntityTypeCode in (select PrimaryEntityTypeCode from CustomControlDefaultConfigBase group by PrimaryEntityTypeCode having count(1) >1) group by

PrimaryEntityTypeCode

• Delete these records and export the solution again (managed or unmanaged)
• Try to import it on the new environment

Configure SetSPN for Dynamics CRM ADFS implementation

Configure SetSPN for Dynamics CRM ADFS implementation

The below SPN configuration works to open internal(automatically login) and external URL ADFS and also able to open report both custom and standard report in CRM.

Infrastructure:

The below server are used for Dynamics CRM.

ComputerName	Ip Address	Computer name	Full Computer name
CRM server	10.0.5.40	CRM01	CRM01.CFC.Com
ADFS server	10.0.5.43	ADFS01	ADFS01.CFC.Com
SQL server	10.0.5.46	SQL01	SQL01.CFC.Com

Service Accounts:

Server Name	Service Account Name
CRM Server	CRM_APP_SVC_PROD
ADFS Server	CRM_ADFS_SVC_PROD
SQL Server	CRM_SRS_SVC_PROD

Wild Card Certificate:

• *CFC.org

FederationService Name:
Federation service name is provided at the time of install ADFS in the server.

• FS2016

CRM Application server SPN Details:

CRM ADFS Server SPN Details:

Change the Federation Service Name of ADFS

If you change federation service name in the ADFS server. GoTo AD FS Management, click

"Edit Federation service properties". Change the federation service name and click "Ok" button.

Change service account of CRM,ADFS and SSRS and their permission-Part2

Change service account of CRM,ADFS and SSRS and their permission-Part2

In the last post we saw permission that are need to provide service account of CRM(IIS),ADFS and CRM service account.

This post we are going to see how to change service account.

CRM -IIS:
To change the service account of IIS application pool, we have to repair the Dynamics CRM. Go to Control panel->un-install program->Select the Microsoft Dynamics CRM->Right click uninstall/Change and repain

Dynamics CRM services:
The above process will also change the CRM service account.

ADFS:
After you provide permission to the ADFS service account. Goto services.msc->right click the ADFS service and click logon tab and provide new service account user name and passwor.

Change service account of CRM,ADFS and SSRS and their permission-Part1

Once you installed CRM,ADFS and SSRS in the server. If you want to change the service account of CRM,ADFS and SSRS. The below permission are needed for the service account while changing directly in the service.msc window.

IIS Application Account

• Create a service account for IIS.
• It must be a domain user.
• Add the service account in the following Local Group Membership
• Performance Log users
• Provide “Log on as service” rights in the Local Security Policy Rights

ADFS Service Account

• Create a service account for ADFS.
• It must be a domain user.
• Provide “Log on as service” rights in the Local Security Policy Rights
• Add this service account in the CN= 409390d6-e4d1-4159-a6a7-f6ef0d939b48 on ADSI. Please below the steps to add user in the corresponding AD
• In the AD sever, type “ADSIEdit.msc” in the run command
• ADSI window will open, in that right click Top node of the left pane and click connect to. Connection settings window  will be open in that click ok button.
• A new node will be add in the left pane. Expand it DC->CN=ProgramData->CN=Microsoft->CN=ADFS
• In the right pane find ADFS starting with CN= 409390d6-e4d1-4159-a6a7-f6ef0d939b48, right click that object click properties.
• A new window will be opened. In that click security tab and add ADFS service account and give "Full control"
• 
  

To Get the the ACTIVE Directory Federation Service id:
Run the below command in the power shell where you install ADFS.

Get-ADFSProperties

• Provide permission dbowner permission to access the ADFS internal database(
• Open the SQL and connect \\.\pipe\MICROSOFT##WID\tsql\query in the ADFS server
• security->logins->Create new login as windows authentication
• In the  user mappings click adfsArtifactStore,AdfsConfiguration check box and Provide db owner and dbpublic permission.
• Provide administrator permission to that service account

SSRS Service Account

• Create a service account for ADFS.
• It must be a domain user.
• Provide “Log on as service” rights in the Local Security Policy Rights.
• Create this service account  in the CRM database logon as windows authentication(Security->Login->Create user)

• The service account needs to add in the following groups
• ReportingGroup
• SQLAccessGroup
• Priv user group

CRM Service Account

• Create the service accounts for the below services with the suffix as “PROD” . For E.g.:-    Crm_App_Svc_PROD (Application Service)
• Application Service
• Deployment Web Service
• Sandbox Sync Service
• Async Processing Service
• VSS Writer service
• Monitoring service
• Provide “Log on as service” rights to the above service accounts in the Local Security Policy Rights
• The following permissions are needed for the service account
• Create, delete and manage user accounts
• Read all user information,
• Create, delete and Manage Groups
• Modify the membership of a group
• Performance Log Users group in the groups (System Tools > Local Users and Groups > Groups)

Find SID of username/account in the Active Directory

Open powershell:

 Get-ADUser -Identity 'administrator' | select SID

Migration CRM on Premise to Dynamics 365 Online

Migration CRM on Premise to Dynamics 365 Online

To Migrating CRM onPremise to online first we have to create CRM onpremise entity to CRM online for that we will able to solution import to CRM online is possible

Version compatibility

Solutions exported from an earlier version of Dynamics 365 can be imported into later versions as shown in the following chart.

Generally, solutions can be imported into organizations less than two versions higher than the version the solution was exported from. Service pack releases will provide the option to either export a solution with compatibility for that service pack, or just with capabilities included in the base version. More information: Version compatibility.

For Microsoft Dynamics CRM 2013 Service Pack 1 (SP1), enhanced service capabilities were included for new Microsoft Dynamics 365 (online) organizations and existing Microsoft Dynamics 365 organizations had the option to install these capabilities. Solutions exported from organizations with the enhanced service capabilities can’t be installed into a CRM 2013 SP1 organization without the enhanced service capabilities enabled unless the solution is exported using the option to select compatibility for the base version.
https://msdn.microsoft.com/en-us/library/gg334576.aspx#BKMK_VersionCompat

Microsoft dynamics crm the account does not have performance counter permissions

Microsoft dynamics crm the account does not have performance counter permissions

• In Server Manager,Tools > Computer Management
• Select System Tools > Local Users and Groups > Groups
• Select the Performance Log Users. Then right-click on Performance Log Users and select Add to Group
• Click Add and select your service account(Application and Asynchronous service) 
• Click OK to complete

Note:
 If you are on the Domain Controller, you cannot find Local Users and Groups in the Computer Management. In the case you want to add any account to the local Administrator group on the domain controller machine, just open Active Directory Users and Computer.

Change CRM service account after Dynamics CRM installed

Change CRM service after Dynamics CRM installed

Once we change the CRM service account after dynamics CRM installed. We have to add corresponding service account in the below groups.

• PrivUserGroup
• SQLAccessGroup

Create a wild card certificate for Dynamics CRM

There are two ways

• MakeCertificate
• Powershell

 MakeCertificate

• Open command prompt
• Go to makecert.exe directory cd C:\Program Files (x86)\Windows Kits\8.1\bin\x64(check the path were your makecert.exe file is present)
•  Make your certificate

makecert.exe -r -pe -n "CN=*.contoso.com" -b 01/01/2010 -e 01/01/2050 -eku 1.3.6.1.5.5.7.3.1 -ss my -sr localMachine -sky exchange -sp "Microsoft RSA SChannel Cryptographic Provider" -sy 12

(change the name contoso with your domain name. To check the domain name open Server Manager→ Local Server→ Domain)

Power Shell

• From windows server 2012 R2 makecert was depreciated and we have to use power shell
• Step:1 Download the ps1 file in the link https://gallery.technet.microsoft.com/scriptcenter/Self-signed-certificate-5920a7c6#content
• Step:2 Copy the download file and extract it into another folder C:\Test\
• Step:3 Open the power shell as administrator mode and then

PS C:\Test> . .\New-SelfSignedCertificateEx

PS C:\Test> New-SelfSignedCertificateEx -Subject "CN=*.minsa.org" -EKU "Server Authentication" -KeyUsage 0xa0 -StoreLocation "LocalMachine"  -ProviderName "Microsoft Strong Cryptographic Provider" -Exportable

Please refer below url
http://sanganakauthority.blogspot.in/2014/06/the-certificates-with-cng-private-key.html

Check user has Domain ADMIN rights in the server/machine

Check user has Domain ADMIN rights in the server/machine

Login AD server and type cmd in run window.

net group "Domain Admins"

Check user has ADMIN rights in the server/machine

Check user has ADMIN rights in the server/machine

Type cmd in the run windownet group "Domain Admins"

Right click the administrators and click properties you can see the users who are in the list

Check port number is opened or not

Check port number is opened or not

You can check if a port is open in your network by issuing the telnet command. If it is open, you will see a blank screen after issuing the command:

telnet [domainname or ip] [port]

where

[domainname or ip] is the domain name or IP address of the server to which you are trying to connect
[port] is the port number where the server is listening
If the port is open, you will see a blank screen. This will mean that connection is successful.

For example

telnet contoso 443

Dynamics CRM 2016 Installation pre-requistics-Basic

Dynamics CRM 2016 Installation pre-requistics

• Provide the access to CRM PROD SQL Server to take CRM SQL back up
• Provide the access to CRM TEST SQL Server
• Provide the path of the CRM installation software
• Provide administrative access to new CRM TEST server to install the CRM
• Create the service accounts for the below services with the suffix as “DEV” . For Eg:-    Crm_App_Svc_DEV (Application Service)

• Application Service
• Deployment Web Service
• Sandbox Sync Service
• Async Processing Service
• VSS Writer service
• Monitoring service
• Create separate organization unit for CRM and in that organization please add Karya user and let us know the name of the organization. The following permissions are needed for the Karya user in that organization unit.
• Create, delete and manage user accounts
• Read all user information,
• Create, delete and Manage Groups
• Modify the membership of a group

Purpose of OU:

• To create an Organization Unit in Active Directory to contain the CRM Security group that will be created during the CRM installation. 

Install Development tools

• Install Microsoft Visual Studio 2015 Community edition
• Install the Dynamics CRM 2013 SDK