locked
CRM - 2 unterschiedliche Domänen RRS feed

  • Question

  • We have 2 companys with different ADs between the companys exist a trusted domain in windows 2003 server mode

    if i want to create a new user in crm some settings are read from the trusted domain (ex.: phone) but on save click a error occured. if i looked in ad i can see crm would like to add the user to a global security group and this is not possible. user of the outher domain can only be added to a local security group.

    is there a way to work company wide with the same crm?

    regard
    markus

    #############################
    Wir sind teil eines Konzerns und wollen jetzt Konzern übergreifend CRM installieren. Im Moment teilt sich der Konzern in 2 Domänen auf Domäne A und Domäne B. Beide Domänen laufen im Windows 2003 Modus und es besteht eine Vertrauenstellung zwischen den beiden. Leider ist es mir trotz allem nicht möglich im CRM einen Benutzer aus der anderen Domäne hinzuzufügen. Beim anlegen des Benutzers werden zwar schon einige Daten aus dem AD ausgelesen (Bsp.: Telefonnummer,...) aber beim speichern kommt eine Fehlermeldung.

    Wenn man im AD nach sieht sieht man auch das Problem denn CRM möchte den Benutzer in eine Globale Sicherheitsgruppe geben dies ist aber anscheinend nicht möglich. Dem CRM beizubringen die Benutzer in eien lokale Sicherheitsgruppe zu legen habe ich bis dato nicht geschafft.

     Im moment arbeite ich so das die crm benutzer einen account in der domäne A und B haben um so im CRM arbeiten zu können leider funktionieren dann gewisse Funktionen nur eingeschränkt bis gar nicht.

    Danke für Tipps und Ratschläge.


    mfg
    Markus
    Wednesday, October 7, 2009 7:41 PM

Answers

All replies

  • Hi Markus,

    can you please provide the error information? Is the trust between the two domains bi-directional?

    btw.: there is also a german crm forum -> http://social.microsoft.com:80/Forums/de-DE/user/forums
    Wednesday, October 7, 2009 8:15 PM
  • thanks for your replay - i know the german but have some problems to write there a new post.

    On the window of the trust mmc i have 3 maps on the middle map i can see two windows with the same infos

    domainname = xxxx
    The Type of the trust = "Gesamtstruktur" - ?Fullstructure?
    Transitiv = Yes


    when i click on properties there are some more information

    bi-directional: user in the lokal domain.....

    the trust ist transitiv on .......

    on the next map "namesuffixrouting is see

    domainname  = xxx
    routing  = active

    authentication = fullstructure authentication


    -----------------------------------------------------------------------------


    ERROR
    there are no error Information that will help the ERROR is that CRM will put user of the trusted Domain to a Global Security Group and this is not possible. i only can put user of the trusted domain to a local security group.
    Thursday, October 8, 2009 5:20 AM
  • Hello,

    have you seen this part of the planing guide?
    <snip>

    Active Directory-Anforderungen

    Ø  To create the domain local security group with users from the mixed-mode trusted domain, follow these steps:

    Important

    For users from mixed-mode domains to access Microsoft Dynamics CRM, the Microsoft Dynamics CRM security groups must be created as Domain Local.

    The Microsoft Dynamics CRM security groups cannot be Global Security groups.

    Users in a Windows NT mixed-mode domain cannot be added as Microsoft Dynamics CRM users because Windows NT mixed-mode domains are not supported. To resolve this issue, you must upgrade the Windows NT mixed-mode domain level to at least a Windows 2000 mixed mode. If you are upgrading a Microsoft Dynamics CRM 3.0 deployment with users in a Windows NT mixed-mode domain, you must update the domain level before you run Setup.

    </snip>


    Viele Grüße

    Michael Sulz
    axcentro GmbH
    MVP für Microsoft Dynamics CRM
    Thursday, October 8, 2009 6:18 AM
  • hm maybe it can be a way but i think we use crm 4.0 and the domain was w2000 mixed mode now the domain is w2003 on both.

    were did you find the paper for crm? maybe i can find more info on this page at the MS crm site i cant find some papers!?!?

    thx
    markus 
    Thursday, October 8, 2009 8:55 AM
  • Hi Markus,

    you can find the paper here:
    German: Microsoft Dynamics CRM 4.0 Implementation Guide
    Englisch: Microsoft Dynamics CRM 4.0 Implementation Guide
    Viele Grüße

    Michael Sulz
    axcentro GmbH
    MVP für Microsoft Dynamics CRM
    • Marked as answer by Jim Glass Jr Thursday, October 8, 2009 3:13 PM
    Thursday, October 8, 2009 11:25 AM