Login Issues - GP9

[Borvik]

This is a rather weird problem that just crept up in the past few days.

After choosing the company to log in to the user receives two messages:

"Your login has been removed from the user activity file and you cannot be in the accounting system."

followed by

"Not privileged to open this form."

It seems to be intermittent, but I can get the user to log in after a reboot of the machine. Some users are running Vista: Business, and some are using Windows XP Pro.

I would like to know the cause (if possible) so I can prevent it from happening in the future.

Thanks.

 

[winthropdc]

How to resolve Security errors on Login
=======================================

Symptoms
--------

When logging into Microsoft Dynamics GP or Microsoft Great Plains, you might receive a "You don't have security privileges to open this window." error message. Once you click OK, the login appears to complete.


Introduction
------------

During login, access is required to a number of forms within the product, if access has been denied you will receive the error described. Even if you follow the KB Article on the subject (see below) you might still receive this error. The issue is that many third party and Independent Software Vendor (ISV) products open hidden forms just after login. If security access has been denied to these forms you will be able to login, but will receive the error message.

NOTE: Before attempting the steps below, try using Advanced Security's interactive dialogs to find and fix the problem. Turn on the "Allow Security override using the system password" option in the Advanced Security Options window and login again.


Steps to Resolve
----------------

1) Turn on SQL Logging to create a DEXSQL.LOG (see KB Article below).

2) Delete or rename the DEXSQL.LOG (if one already exists).

3) Log in and get up to the Security error message.

4) Rename the DEXSQL.LOG so that no more logging is added to this log (for example: rename to DEXSQL_Error.LOG).

5) Open DEXSQL_Error.LOG with Notepad and find the last line starting with "EXEC DYNAMICS.dbo.zDP_SY02000SS_1".

For example: EXEC DYNAMICS.dbo.zDP_SY02000SS_1 1, 'user', 309, 2, 22047

6) Look in your DYNAMICS.SET Launch file for the Product ID represented by the number after the User ID. The name of the product will be on the following line.

For example: 309 is Fixed Assets.

7) The next number is 2, which tell us that the resource is in question is a Form.

8) To identify the actual window involved, we can use the security setting export file from Advanced Security. Open Advanced Security (Tools >> Setup >> System >> Advanced Security). Click Import/Export. Click Export. Click OK and close Advanced Security.

9) Find the Exported file (for example: user_1.user.xml) and open it with Notepad or Internet Explorer.

10) Press Ctrl-F for Find and type in the Product ID (for example: 309) and search for start of the product.

For example: <RES_DICT ID="309" NAME="Fixed Assets">

11) Press Ctrl-F for Find and type in the Resource ID (for example: 22047) and search actual form. Make a note of the Display Name (DISP_NAME).

For example: <RESOURCE ID="22047" DISP_NAME="Asset User Data" TECH_NAME="FA_User_Data_Maintenance">

12) Scroll up to find the series the form belongs to.

For example: <RES_SERIES ID="1" NAME="Financial">

13) Use Advanced Security to grant access to the form using the By Dictionary view based on the Product Name, Forms, the Series and Display Name you obtained in the previous steps.

For example: By Dictionary >> Fixed Assets >> Forms >> Financial >> Asset User Data


NOTE: Using Advanced Security's By Menu view to set security avoids the possibility of denying access to lookups, hidden or system forms and will usually avoid security errors during login.


More Information
----------------

For more information on creating a DEXSQL.LOG or what the minimum secuirty access required to log in is, please see the KB Articles below:


How to create a Dexsql.log file for Microsoft Dynamics GP and Great Plains

https://mbs.microsoft.com/knowledgebase/KBDisplay.aspx?scid=kb;en-us;850996

How to set up minimum security access to log in to Microsoft Dynamics GP or to Microsoft Great Plains

https://mbs.microsoft.com/knowledgebase/KBDisplay.aspx?scid=kb;en-us;858718

David Musgrave [MSFT]
Senior Development Consultant
Escalation Engineer - Great Plains
Microsoft Dynamics Support - Asia Pacific

Microsoft Dynamics (formerly Microsoft Business Solutions)

http://www.microsoft.com/Dynamics

Any views contained within are my personal views and
not necessarily Microsoft Business Solutions policy.
This posting is provided "AS IS" with no warranties,
and confers no rights.

 

[Borvik]

Thanks Dave,

Next time this problem pops up, I will try this.

 

[Borvik]

Ok - what I found and tried didn't work.

The last line containing "EXEC DYNAMICS.dbo.zDP_SY02000SS_1" had this:

EXEC DYNAMICS.dbo.zDP_SY02000SS_1 1, 'sa', 0, 2, 736

Ok from that I know 0 is the Dynamics GP core product.

I exported the security from Advanced security and found two places where there is a resource id of 736:

<RESOURCE ID="736" DISP_NAME="POP Item Inquiry Report Work" TECH_NAME="POP Item Inquiry Report Work">

This one is under Reports -> Purchasing - as the 2 indicates this is not it as 2 refers to a Form.

The other one with a resource id of 736 is:

<RESOURCE ID="736" DISP_NAME="Purchasing Receipt Numbers" TECH_NAME="POP_Receipt_Lookup">

This one is under Forms -> Purchasing - so this must be the one.

I went into advanced security and sa DID have access to this form, or rather the SmartList alternative form for it - so I changed it to the default.

The errors did not go away.

If we were able to get rid of the "Your login has been removed from the user activity file and you cannot be in the accounting system." error I'm pretty sure the security error wouldn't show up.

These errors show up directly after selecting the company.

Right now restarting the client computer is the only way to clear these errors. It's making me think there is something on the client computer causing this - but I'm not sure what that could be.