It is necessary because it relies on Active Directory groups it needs to create. The users will also already have to be domain users in order to add them to CRM also.
You don't have to necessarily be on the domain to access CRM though if you set it up as an IFD (Internet Facing Deployment).
So it has to be on a domain, but it could be a separate or it's own domain. The users would have to type in their new domain credentials every time they access it though. But, if it's on the same domain the authentication is seamless Active Directory
authentication.
Jamie Miley
http://mileyja.blogspot.com
Linked-In Profile
Follow Me on Twitter!