An update is available to reduce the permissions required to operate the Microsoft CRM 1.2 Sales for Outlook client (841124)

RESOLUTION

Configuring the Outlook client to operate with reduced permissions requires a series of manual steps and downloading, extracting, and running a script program.

The download package is available from the Microsoft Download Center:
http://www.microsoft.com/downloads/details.aspx?FamilyId=3C97B2D0-4A45-44A8-A630-165C63E0F4E8&displaylang=en
For additional information about how to download Microsoft Support files, click the following article number to view the article in the Microsoft Knowledge Base: Microsoft has scanned these files for viruses. Microsoft used the most current virus-detection software that was available on the date that these files were posted. These files are stored on secure servers that prevent any unauthorized changes to these files.

Installation information

Installation information is specified in the following procedures.

File information

The English version of this file has the file attributes as listed in the following table. The dates and times for this file are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, click the Time Zone tab in the Date and Time tool in Control Panel.

Microsoft CRM Sales for Outlook
Download file name: CRM1.2-KB841124-Client.exe

   Date         Time   Version       Size     File name 
   ----------------------------------------------------------
   18-Apr-2004  10:07  5.2.3790.0  36,864  regini.exe
   4-Aug-2004   05:29    None       87     mscrm.ini
   27-Jul-2004  05:58    None      1,763   outlooksec.cmd
   18-May-2004  10:18    None      264     outlooksecmain.cmd

Procedures

Perform the following steps to configure the Outlook client computer so that a Microsoft CRM user does not have to be a local administrator to use the Outlook client. These procedures are general in nature. Detailed procedures where appropriate are provided later in this article.

Note For these procedures to work correctly, both the administrator and the user must be valid users in the Active Directory domain that contains the Microsoft CRM server.

1. On the client computer, add a valid Microsoft CRM user to the local administrators group. This user must be the same as the Outlook client user. (See the detailed procedure later in this article for adding a user to the local administrators group.)
2. Log on to the client computer as the Microsoft CRM user (now a local administrator). Install the Outlook client. (See the Microsoft Business Solutions CRM Implementation Guide Version 1.2 for installation procedures.)
3. Perform Outlook client tasks such as viewing a record list and creating a new record. Then go offline and make sure that you have function generally offline. Go online again. If you often use import functionality, you need to use the import feature now.
4. Log off the client computer.
5. Log on to the client computer as an administrator (a domain user with local administrative rights and who is not the Microsoft CRM user who installed the Outlook client).
6. Remove the Microsoft CRM client user from the local administrators group. (See the detailed procedure later in this article for removing a user from the local administrators group.)
7. Extract the Outlooksecmain.cmd file from the download package and run the following script at a command prompt. The Microsoft CRM user's domain name and user name are required parameters.
   Outlooksecmain.cmd [domainname\username]
   
   For example: Outlooksecmain.cmd userdomainname\username
   
   Outlooksecmain.cmd is a script that grants users permissions to the folder %systemroot%\Microsoft.NET\Framework, uses osql.exe to grant permissions to all MSDE databases. On Microsoft Windows® 2000 systems, it uses regini.exe to grant required Registry permissions. It will write to the log file, outlooksec.log, which can be used for troubleshooting.
8. Log off the computer, and log back on to the computer as the Microsoft CRM user, and then open the Outlook client.

Detailed Procedures

Add a user to the local administrators group

1. On the client computer, click Start, point to Control Panel, point to Administrative Tools, and then click Computer Management.
2. In the console tree, expand Local Users and Groups, and then click Groups.
3. Right-click the Administrators group, click Add to Group, and then click Add.
4. Click Locations, click the domain containing the user you want to add, and then click OK.
5. In the Enter the object names to select box, type the name of the user you want to add to the group, and then click OK. If you want to validate the user name that you are adding, click Check Names.
6. Click Apply, and then click OK.
7. Close Computer Management.

Remove a user from the local administrators group

1. On the client computer, click Start, point to Control Panel, point to Administrative Tools, and then click Computer Management.
2. In the console tree, expand Local Users and Groups, and then click Groups.
3. Double-click the Administrators group, click the user that you want to remove. Click Remove, and then click OK.
4. Close Computer Management.

Extract the files from the download package

1. Place the download package CRM1.2-KB841124-Client.exe in a temporary folder.
2. Double-click CRM1.2-KB841124-Client.exe. The contents of the package extract to the temporary folder.