February 10, 2010 in Blog by Amer

Workflow Configuration Error: “401 Unauthorized”

When you install Dynamics AX Workflow, you might install it on a different machine that the AOS, like a web server for example. In this case, you have to install the following on the workflow server to get your workflow works:

1. IIS
2. .NET Business Connector
3. Create a new website on IIS (do not use the same of WSS or EP websites, it is recommended not to use an existing website even)
4. Workflow

Before going into step number “4”, you have to configure the “System service accounts” in: Dynamics AX –> Administration –> Setup –> Secuity. Fill these fields like the following:

• Busienss Connector Proxy: create a domain account and assign it here, this user doesn’t have to be a Dynamics AX user.
• Workflow System Account: Select a user like the Administrator  from the drop down list
• Workflow Execution Account: like the previous step

Now you should be able to go through the step “4”, and install the Workflow component.

After installation, go to Dynamics AX –> Administration –> Setup –>Workflow insfrastructure configuration wizard. If you are getting an error after installing Dynamics AX Workflow: “401 Unauthorized”, then insure that you go through the following:

1. AOS Service is running under an active domain user (domainusername)
2. Workflow website and workflow application pool are having the same .NET Business Connector user name Identity (and of course, this should be an active domain user)
3. You added the workflow website (http://servername:portnumber/DynamicsAXWorkflow50 for example) to the trusted sites in Internet Options of AOS server
4. Run the following on the Workflow server:

• �
  • Start a command prompt.
  • Locate and then change to the directory that contains the Adsutil.vbs file. By default, this directory is C:InetpubAdminscripts.
  • Type the following command, and then press ENTER:

cscript adsutil.vbs set w3svc/NTAuthenticationProviders “NTLM”

• �
  • To verify that the NtAuthenticationProviders metabase property is set to NTLM, type the following command, and then press ENTER:

cscript adsutil.vbs get w3svc/NTAuthenticationProviders

The following text should be returned:

NTAuthenticationProviders       : (STRING) "NTLM"

By this, workflow infrastructure configuration wizard should work fine now.