Demo and VPC Trainings coming up!

Inside Microsoft Dynamics GP published the dates for the Demo and VPC Trainings around the US, unfortunately such event does not cover the Middle East, it would be great if they could expand it to our region!

Find out the training schedule in this article.

Regards,

Mohammad R. Daoud – CTO
MVP, MCT, MCP, MCBMSP, MCTS, MCBMSS
+962 – 79 – 999 65 85 
mohdaoud@gmail.com
mohdaoud.blogspot.com

Advertisements

Checkbook Transactions Using SQL Query

Interesting article by Victoria Yudin, she displayed the Checkbook Register using SQL view, find her article here.

Regards,

Mohammad R. Daoud – CTO
MVP, MCT, MCP, MCBMSP, MCTS, MCBMSS
+962 – 79 – 999 65 85 
mohdaoud@gmail.com
mohdaoud.blogspot.com

Microsoft Dynamics Community 2.0

Personally, when Microsoft announced the discontinuation of old public newsgroups microsoft.public.greatplains and the microsoft.public.dynamics.gp.developer, I didn’t like the idea! I been working the last 3 years on a platform that currently will need to be changed!

Few days ago, I start accessing the community and start replying on the users questions, I really found an amazing difference between this version of community and what I used to work on! I enjoyed working on many new features announced in this post, mainly I touched the social networking during newsgroup questions and saw the blog posts consolidated in one place.

Well done guys!

Regards,

Mohammad R. Daoud – CTO
MVP, MCT, MCP, MCBMSP, MCTS, MCBMSS
+962 – 79 – 999 65 85 
mohdaoud@gmail.com
mohdaoud.blogspot.com

Asset groups does not shown up when logging by another user

I found an interesting question in the Dynamics GP Forum, the user was trying to fix security issue as one of GP users cannot see the Asset Groups, below is the question:

In several of the Fixed Asset transaction screens, like the Fixed Assets Mass Change screen, there is a Asset Group ID drop down select list. For one of our users this drop down does not function. I’ve compared his security to a user that has the drop down working correctly and cannot see any difference. The two users can log in to GP on the same machine and it works for one and not the other. Can anyone give me any suggestions on what I might check?

Below is my answer:

This is not related to any security reasons, actually Assets groups is User Oriented field, each user will have its own groups that are not shared with other users, as written in the F1 help:

“Asset groups are saved on a user-by-user basis. For example, if user A creates an asset group, user B will not see that asset group anywhere in Fixed Asset Management.”

Hope that this helps.

Regards,

Mohammad R. Daoud – CTO
MVP, MCT, MCP, MCBMSP, MCTS, MCBMSS
+962 – 79 – 999 65 85 
mohdaoud@gmail.com
mohdaoud.blogspot.com

Users Created by Dynamics GP assigned automatically to “db_owner” role!?!?!

Looks like I have a tough month, last week I spent 4 days in AQABA for customer support and yesterday I presented Dynamics GP for a new customer in Damascus, the customer’s team is highly trained team with a minimum of 15+ years of experience in ERP field, they requested an interesting specific demo script that shows the ERP functionalities and weaknesses, I requested the authorization to share this demo script and waiting for their confirmation.

However, I got an interesting case last week, my customer informed me that every time they adds a new user using Dynamics GP users, the user is added automatically to the db_owner role on all databases!?! First I didn’t believe in this but when I checked this it turns to be true!

After investigating on this, I found the reason behind this, the whole “DYNGRP” role which used by the Dynamics GP application to set users security was added to the “db_owner” role, therefore when adding any user to the DYNGRP it was automatically grants the db_owner permissions! I just removed the DYNGRP from db_owners role and everything worked perfectly as expected.

Hope that this helps.

Regards,

Mohammad R. Daoud – CTO
MVP, MCT, MCP, MCBMSP, MCTS, MCBMSS
+962 – 79 – 999 65 85 
mohdaoud@gmail.com
mohdaoud.blogspot.com

Dynamics GP Direct Database Modifications Audit

Customers that holds certificates such as the ISO and many others, normally having bad fights with auditors on security audits and database monitoring tools, normally I gets allot of requests on how to monitor this up and get rid of those auditors!

Few months back, I created a script that generates database triggers on all database tables and sends all the activities to a transactions log table that in return will hold all transactions.

Lets think about it again, what users should I monitor? Dynamics GP users does cannot access the SQL Databases using any other application as all the passwords are encrypted and only Dynamics GP application and Mariano Gomez can decrypt it! I mean only Dynamics GP!

So users that need to be monitored are listed below:

1. Users that does not have access to Dynamics GP but have direct access to the SQL.

2. Users that has access to both Dynamics GP and SQL Databases and does not have their passwords encrypted, which are only two “sa” and “DYNSA”.

3. Users that’s login using windows authentication.

Now using SQL 2008, you can audit all above using the Database Audit feature, go to “SQL Server –> Security Folder –> Audits” and follow steps below to activate this:

Create new Audit:

image

Go to the database you wish to monitor, navigate to its security folder –> Database Audit –> Create new:

image

Now you need to specify actions you wish to audit, personally I wanted to monitor “Insert, Update, Delete and Execute” for non-GP users, “dbo” represents any user with sysadmin permissions, which includes “sa” and “DYNSA” and “SYSTEM” users represents any user logged in using windows authentication.

Set back and relax watching any unwanted modifications done on the database monitored, and view what does this recorded from time to time by right clicking your audit and selecting “View Audit Log”:

image

image

For CFO’s and top management reporting, you cannot ask them to go to your SQL and view the report! So you will have to setup another solution:

1. Create a new view on your Master database with the following command:

SELECT     *
FROM         dbo.fn_get_audit_file(‘C:\Database Modifications Audit\*’, DEFAULT, DEFAULT)

Where “Database Modifications Audit” is the folder I created on the C:\ Drive to save all my logs.

2. Create a new SQL Login that has permissions only on this view.

3. Create an excel file that reads directly from this view using Data Source.

4. Send this excel file to the top management and ask them to refresh.

Regards,

Mohammad R. Daoud – CTO
MVP, MCT, MCP, MCBMSP, MCTS, MCBMSS
+962 – 79 – 999 65 85 
mohdaoud@gmail.com
mohdaoud.blogspot.com

Passed New Exams!

This morning, I went to the exams center with my both colleagues Nancy and Omar to attend “Managing Microsoft Dynamics Using Sure Step Methodology” exam, it was such an exciting experience answering questions related to the management part instead of the usual technical’s, we all passed!!

Few hours later, I decided to attend the “Microsoft Dynamics GP 2010 Installation and Configuration”, honestly it wasn’t an easy task, I still didn’t work deeply on Dynamics GP 2010 nor worked deeply on SQL 2008, I thought it will not be that much difference than Dynamics GP 10.0 exam, unfortunately it was! I passed the exam but got 72% mark! I would fail if I missed 2 more questions!

It was focused on the Word Templates customizations, printing and installation, in addition to SQL 2008 express and process server.

Thanks GOD!

Regards,

Mohammad R. Daoud – CTO
MVP, MCT, MCP, MCBMSP, MCTS, MCBMSS
+962 – 79 – 999 65 85 
mohdaoud@gmail.com
mohdaoud.blogspot.com