Home/ Questions/Q 8816187
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-14T04:33:40+00:00

public void Main2() { DeploymentServiceClient service = Microsoft.Xrm.Sdk.Deployment.Proxy .ProxyClientHelper.CreateClient(new Uri(http://xxxxxxxxx:5555/XRMDeployment/2011/Deployment.svc)); Console.WriteLine(CreateOrganization(service , new Organization

  • 0
public void Main2()
{
    DeploymentServiceClient service = Microsoft.Xrm.Sdk.Deployment.Proxy
        .ProxyClientHelper.CreateClient(new Uri("http://xxxxxxxxx:5555/XRMDeployment/2011/Deployment.svc"));
    Console.WriteLine(CreateOrganization(service
        , new Organization
        {
            UniqueName = "testOrgProv1",
            FriendlyName = "testOrgProv1",
            SqlServerName = "CRMDDC2",
            SrsUrl = @"http://crmddc2/Reports",
            BaseCurrencyCode = RegionInfo.CurrentRegion.ISOCurrencySymbol,
            BaseCurrencyName = RegionInfo.CurrentRegion.CurrencyNativeName,
            BaseCurrencySymbol = RegionInfo.CurrentRegion.CurrencySymbol,
            State = Microsoft.Xrm.Sdk.Deployment.OrganizationState.Enabled
        }));
}

Guid? CreateOrganization(IDeploymentService deploymentService
    , Organization org)
{
    BeginCreateOrganizationRequest req = new BeginCreateOrganizationRequest
    {
        Organization = org
    };

    BeginCreateOrganizationResponse resp = deploymentService.Execute(req) as BeginCreateOrganizationResponse;
    return resp != null ? (Guid?)resp.OperationId : null;
}

but I’m getting the error as

“The Deployment Service cannot process the request because one or more validation checks failed.”

I’m using the local administrator account, it is also the deployment administrator,

ps: when I used similar code in a different way, the same error was popping but there the internal message was

“The current Active Directory user doesnt have read write permission on the reporting group …..”

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    I’m working through the same issue. I’ve found two articles that propose two different solutions:

    This post reminds me of one of those links. In the first article, the author mentions that the deployment service (check IIS app pool) identity needs to have AD permission granted over the OU for the ReportingGroup.

    To summarize the two articles:

    • Find the app pool identity for the CrmDeploymentServiceAppPool, henceforth <identiy>
    • Add the <identiy> to the Local Administrator and CRM_WPG groups
    • Delegate Control to <identiy> in AD of the OU containing PrivUserGroup and SqlAccessGroup
    • Grant <identiy> the “Log on as a Service” in the “secpol.msc” local rights management
    • Grant “sysadmin” privileges to the <identiy> in SQL server
    • Grant Read/Write permissions to <identiy> on the MSCRM_Web and Trace folders in your CRM
    • Grant Read/Write permissions to <identiy> in “regedit” on the entries HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSCRM and HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MSCRMSandboxService subkeys
    • Reset the App Pool
    • Run the scripts

    If this fails to work, double check the links above, pray to God, then call MS Tech support (order is up to you). (Also, if you find something was missing, feel free to post or edit.)

    • 0