How to resolve Security errors on Login
=======================================
Symptoms
--------
When logging into Microsoft Dynamics GP or Microsoft Great Plains, you might receive a "You don't have security privileges to open this window." error message. Once you click OK, the login appears to complete.
Introduction
------------
During login, access is required to a number of forms within the product, if access has been denied you will receive the error described. Even if you follow the KB Article on the subject (see below) you might still receive this error. The issue is that many third party and Independent Software Vendor (ISV) products open hidden forms just after login. If security access has been denied to these forms you will be able to login, but will receive the error message.
NOTE: Before attempting the steps below, try using Advanced Security's interactive dialogs to find and fix the problem. Turn on the "Allow Security override using the system password" option in the Advanced Security Options window and login again.
Steps to Resolve
----------------
1) Turn on SQL Logging to create a DEXSQL.LOG (see KB Article below).
2) Delete or rename the DEXSQL.LOG (if one already exists).
3) Log in and get up to the Security error message.
4) Rename the DEXSQL.LOG so that no more logging is added to this log (for example: rename to DEXSQL_Error.LOG).
5) Open DEXSQL_Error.LOG with Notepad and find the last line starting with "EXEC DYNAMICS.dbo.zDP_SY02000SS_1".
For example: EXEC DYNAMICS.dbo.zDP_SY02000SS_1 1, 'user', 309, 2, 22047
6) Look in your DYNAMICS.SET Launch file for the Product ID represented by the number after the User ID. The name of the product will be on the following line.
For example: 309 is Fixed Assets.
7) The next number is 2, which tell us that the resource is in question is a Form.
8) To identify the actual window involved, we can use the security setting export file from Advanced Security. Open Advanced Security (Tools >> Setup >> System >> Advanced Security). Click Import/Export. Click Export. Click OK and close Advanced Security.
9) Find the Exported file (for example: user_1.user.xml) and open it with Notepad or Internet Explorer.
10) Press Ctrl-F for Find and type in the Product ID (for example: 309) and search for start of the product.
For example: <RES_DICT ID="309" NAME="Fixed Assets">
11) Press Ctrl-F for Find and type in the Resource ID (for example: 22047) and search actual form. Make a note of the Display Name (DISP_NAME).
For example: <RESOURCE ID="22047" DISP_NAME="Asset User Data" TECH_NAME="FA_User_Data_Maintenance">
12) Scroll up to find the series the form belongs to.
For example: <RES_SERIES ID="1" NAME="Financial">
13) Use Advanced Security to grant access to the form using the By Dictionary view based on the Product Name, Forms, the Series and Display Name you obtained in the previous steps.
For example: By Dictionary >> Fixed Assets >> Forms >> Financial >> Asset User Data
NOTE: Using Advanced Security's By Menu view to set security avoids the possibility of denying access to lookups, hidden or system forms and will usually avoid security errors during login.
More Information
----------------
For more information on creating a DEXSQL.LOG or what the minimum secuirty access required to log in is, please see the KB Articles below:
How to create a Dexsql.log file for Microsoft Dynamics GP and Great Plains
How to set up minimum security access to log in to Microsoft Dynamics GP or to Microsoft Great Plains
David Musgrave [MSFT]
Senior Development Consultant
Escalation Engineer - Great Plains
Microsoft Dynamics Support - Asia Pacific
Microsoft Dynamics (formerly Microsoft Business Solutions)
Any views contained within are my personal views and
not necessarily Microsoft Business Solutions policy.
This posting is provided "AS IS" with no warranties,
and confers no rights.
