Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
Minimum permission to install microsoft dynamic crm 2011 ?? RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote
    Hi 
    I want to install microsoft dynamics crm 2011 in my organization that have a AD.
    but my Administrator doesn't give me a domain user with (Administrators or enterprise) permission to install and confiure that.
    I dogging internet and found some page like : http://social.technet.microsoft.com/wiki/contents/articles/3176.how-to-install-microsoft-dynamics-crm-2011.aspx
    In installing some permission required to create and access to some security group .
    and I found create and modify security group on behalf  " Account Operators ".
    do I need Account operators permission after installing CRM 2011 ???
    what permission I need to work with CRM after Installing ?????????
    Thursday, March 1, 2012 8:17 AM

All replies

  • Question
    Sign in to vote
    1
    Sign in to vote

    You don't need administrator permissions in AD.

    follow this steps:

    1. get an OU for CRM (user installing CRM needs write permissions to create usergroups, crm service account needs permissions to manage the groups)
    2. create a service, admin and Sandbox AD accounts
    3. make the service and admin local admins of the CRM server
    4. make the service account sysadmin in SQL
    5. add the sandbox to the local performance user groups on the CRM server
    6. install CRM with the admin account
    7. assign the service accounts to the correct services

    Important note: don't use the same account to install CRM and run the services, because the account that runs the services cannot be a CRM user.

    This is an overview of what is the permissions needed/process to install CRM2011. for more information I highly recommend you read the implementation guide for CRM 2011

    http://www.microsoft.com/download/en/details.aspx?id=3621

    Visit my blog for CRM material, improving performance, kerberos, IFD, development tips, etc. :) http://quantusdynamics.blogspot.com



    • Proposed as answer by nrodriEditor Saturday, March 3, 2012 8:44 PM
    • Edited by nrodriEditor Saturday, March 3, 2012 8:46 PM
    Thursday, March 1, 2012 9:31 AM
    Answerer
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    The above link which you have mentioned is perfect to install the CRM2011.

    For CRM security roles, ask your administrator to give full permissions to the OU where you install the CRM2011 Security roles.

    He need to give delegate controls to the user with which you install CRM2011.

    Ex: A new OU is name CRM.

    1. Right click CRM and click on Delegate Control/

    2. Select the user with which you installing CRM2011.

    Click Next->Select Create a custom task delegate.

    Click Next-> Select Delegate Control of: This filder,existing objects in this folder, and creation of new objects in this folder.

    If your administrator ignores to give full permissions then ask him to give least read and write permissions to that particular OU.

    Regards,

    Khaja Mohiddin http://www.dynamicsexchange.com/ http://about.me/KhajaMohiddin

    Thursday, March 1, 2012 11:32 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    If the AD admin balks at giving you permissions on an OU, you can have them pre-create the CRM groups and then use a command line install.  I wrote a post about installing CRM with AD permission completely removed.

    Thursday, March 1, 2012 12:01 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Chris,

    If install user account was given local admin and sysadmin access to SQL server, can those rights be removed post completion of install with no ramifications?

    I imagine it's a silly question on my part.

    Thanks.

    Friday, April 20, 2012 4:10 AM