Dynamics NAV 5 - Authentication issue

Business Central/NAV Technical Forum
1

Hello all,

I’am working with the following technical environnment:

  • Dynamics NAV 5 DB

  • Windows Authentication enabled. Users that need to have access to Dynamics NAV belong to the same Active Directory group

The problem I’am facing is that some users, belonging to the correct Active Directory group granting access to Dynamics NAV, are not able to connect.

The error returned is: The following SQL server error(s) occurred:

15161, “42000”,[Microsoft][ODBC SQL Server Driver][SQL Server] Cannot set application role ‘$ndo$shadow’ because it does not exist or the password is incorrect

A user not able to connect from his machine is able to connect from another machine… It does not seem to be a permission issue on the server but really on the local machine.

Do you have some ideas on how to solve the problem? I have tried lot of differents things but nothing is working and I’am running out of ideas.

Many thanks in advance for your help.

Best regards.

Jerome

2

Hi Jerome,

Welcome to the Dynamics User Group.

Have you syncronised all user?

Also have a read of these posts

http://dynamicsuser.net/forums/p/21013/97365.aspx#97365

http://www.mibuso.com/forum/viewtopic.php?f=33&t=22707

I will move this post to the SQL forum as it’s more a SQL problem

3

Hello,

thanks for your feedback.

Yes I have synchronized the logins and I have tried to change the security model from standard to enhanced but it did not fix the problem.

I have launched a Trace with SQL profiler. It stops when the client application is calling: sp_setapprole
If I re-create the windows profile of the user it working. However, as I have lot of users, it is not a good solution.

Looking at the above results, it seems that the problem is related to some settings stored on the local machine. Maybe they are used to pass some parameters to the function sp_setapprole.

Any help will be welcome!

Best regards.

Jerome