CRM will not work if IE Add-on blocking is enabled via Group policy

  • Article

If you have enabled below Group policy at domain level to block all IE Add-ons,

  • Deny all add-ons unless specifically allowed in the Add-on List

  • Add-on List

you will no longer be able to access CRM, you will get any of the below errors,

1. Unsupported security settings.

    Microsoft Dynamics CRM required that ActiveX controls be enabled. your current security settings prevent this.

Enable ActiveX controls and try again.

OR

2. you will only see a part of the CRM website.

Here we need to understand the ActiveX controls / components we use in CRM to add it in the Add-on list of the Group policy to make CRM work again.

Below is the resolution to this issue.

Resolution

Ask your Network Administrator to add the following GUID's / CLSID's to the Add-on list

Control name      

                 GUID

XML DOM Document

{2933BF90-7B36-11D2-B20E-00C04F983E60}

XML DOM Document

{F6D90F11-9C73-11D3-B32E-00C04F990BB4}

MSXML2.FreeThreadedDOMDocument

{f6d90f12-9c73-11d3-b32e-00c04f990bb4}

MSXML2.XSLTemplate

{2933BF94-7B36-11d2-B20E-00C04F983E60}

As an administrator you can use Group Policy Management Editor to change the policy settings.

  1. Open your Group Policy Management console.
  2. Right click on the Default domain policy and click on edit.
  3. Expand Computer Configuration or User Configuration (depending on the type of policy in place or you want to implement), expand Administrative Templates, expand Windows Components, expand Internet Explorer, expand Security Features, and then click Add-on Management.
  4. The following policy settings are available:

Deny all add-ons unless specifically allowed in the Add-on List

Add-on List

Process List

All Processes

  1. Enable "Deny all add-ons unless specifically allowed in the Add-on List"
  2. Add above mentioned component GUID's to the Add-on list.
  3. Apply the changes.
  4. Do a gpupdate /force to get the policy updated..

Now you can access CRM.

Note: Above solution is applicable for CRM Vanilla / OOB installation. If you have customized your CRM to use any other control / component you need to add the GUID to the Group policy Add-on list.

Further,  below KB article discusses about the components and the related GUID's which you need to add to the Add-on list when you face similar issue with OWA

https://support.microsoft.com/kb/555235/en-us

 

Best Regards

Dynamics CRM Support Team

Share this Blog Article on Twitter

Tweet

Follow Us on Twitter

Follow @MSDynCRMSupport