Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
Installation Question: Domain Account or Network Account RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote
    I know the installation guide suggests installing CRM 4.0 using a Domain Account but I was curious as to what most of you are using?
    Thursday, September 24, 2009 6:40 PM

Answers

  • Question
    Sign in to vote
    1
    Sign in to vote
    I definately recommend installing ms crm using a domain account.  The account you use to install crm 4 should have certain elevated rights -- to created groups, on the local box, etc.  There are workarounds such as pre-creating groups if security is tight, but this definately adds to the planning and installation time required.

    Alex Fagundes - www.PowerObjects.com
    Thursday, September 24, 2009 6:49 PM
  • Question
    Sign in to vote
    1
    Sign in to vote

    In addition to what Alex said, you need a Domain account because the install user needs rights on Active Directory in order to make changes to the user accounts in AD. 

    Best Regards, Donna
    Thursday, September 24, 2009 7:14 PM
  • Question
    Sign in to vote
    1
    Sign in to vote
    This is just me, but what I usually do is ask for a CRM Admin user account created with Domain Admin rights for the install.  Ensure that user is also added to the Administrator group on any machines that will use CRM, like the CRM server, SQL server, etc.  Once the install is complete they can remove the Domain Admin rights but leave CRM Admin in the Admin groups on all machines running CRM services.

    Anyone that needs to perform CRM Sys Admin duties can then use the CRM Admin user to log onto the servers and perform whatever changes or actions are needed.  This eliminates the need to create multiple user accounts if other people outside the domain need to dial into to do work.
    Best Regards, Donna
    Thursday, September 24, 2009 7:45 PM
  • Question
    Sign in to vote
    1
    Sign in to vote
    Microsoft Dynamics CRM can be installed by an account with a minimum amount of privileges which are:
    1.  Ability to create objects within Active Directory OUs that is the target parent OU for installing Microsoft CRM 
    2.  SQL Server Administrator privilege 
    3.  IIS Server local Administrator privilege 
    4.  Local Administrator on the computer where Microsoft CRM is to be installed 

    If you want install Microsoft Dynamics CRM 4.0 with the minimum required permissions: http://support.microsoft.com/kb/946677
    • Proposed as answer by sl_k83 Friday, September 25, 2009 4:41 AM
    • Marked as answer by Donna EdwardsMVP Monday, October 12, 2009 2:36 PM
    Friday, September 25, 2009 4:41 AM

All replies

  • Question
    Sign in to vote
    1
    Sign in to vote
    I definately recommend installing ms crm using a domain account.  The account you use to install crm 4 should have certain elevated rights -- to created groups, on the local box, etc.  There are workarounds such as pre-creating groups if security is tight, but this definately adds to the planning and installation time required.

    Alex Fagundes - www.PowerObjects.com
    Thursday, September 24, 2009 6:49 PM
  • Question
    Sign in to vote
    1
    Sign in to vote

    In addition to what Alex said, you need a Domain account because the install user needs rights on Active Directory in order to make changes to the user accounts in AD. 

    Best Regards, Donna
    Thursday, September 24, 2009 7:14 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    Thanks Security is very tight where I am at. I just want to make sure I have all of the necessary requests for the Network Team correct and don't get slapped during the actual installation. So let me ask these:

    • I need to request a Domain User account that has temporary domain privileges back to AD to create the 5 security groups in AD. 
    • Once I get this account I need to give it admin privileges to the local machine I am performing the installation on.
    • I also want to request that this account is a part of the Account Operator Group
    Thursday, September 24, 2009 7:32 PM
  • Question
    Sign in to vote
    1
    Sign in to vote
    This is just me, but what I usually do is ask for a CRM Admin user account created with Domain Admin rights for the install.  Ensure that user is also added to the Administrator group on any machines that will use CRM, like the CRM server, SQL server, etc.  Once the install is complete they can remove the Domain Admin rights but leave CRM Admin in the Admin groups on all machines running CRM services.

    Anyone that needs to perform CRM Sys Admin duties can then use the CRM Admin user to log onto the servers and perform whatever changes or actions are needed.  This eliminates the need to create multiple user accounts if other people outside the domain need to dial into to do work.
    Best Regards, Donna
    Thursday, September 24, 2009 7:45 PM
  • Question
    Sign in to vote
    1
    Sign in to vote
    Microsoft Dynamics CRM can be installed by an account with a minimum amount of privileges which are:
    1.  Ability to create objects within Active Directory OUs that is the target parent OU for installing Microsoft CRM 
    2.  SQL Server Administrator privilege 
    3.  IIS Server local Administrator privilege 
    4.  Local Administrator on the computer where Microsoft CRM is to be installed 

    If you want install Microsoft Dynamics CRM 4.0 with the minimum required permissions: http://support.microsoft.com/kb/946677
    • Proposed as answer by sl_k83 Friday, September 25, 2009 4:41 AM
    • Marked as answer by Donna EdwardsMVP Monday, October 12, 2009 2:36 PM
    Friday, September 25, 2009 4:41 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    thank you all, I am working with 100% dedicated Active Directory Sys Admins, I wont sound like a clown asking for access :)
    Friday, September 25, 2009 1:26 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    pIf you could, Please take a few minutes and mark the responses that helped as answers.  This will help people when looking for a solution to a question.  Thank you
    Best Regards, Donna
    Friday, October 2, 2009 7:58 PM