locked
3.0 User Domain Changes RRS feed

  • Question

  • Customer has 50 or so users on their CRM3.0 environment, of which most
    are about to be moved onto a new domain. This new domain is a trusted
    domain of the one that CRM was originally installed on.

    Question: Do we need a redeploy to change the domains of the Users, or
    can it be done via Deployment manager?

    My experience with deployment manager says that alias changes are the
    only supported changes.


    Thoughts?

    Lee

    Saturday, March 15, 2008 1:05 AM

Answers

  • In a word, yes. You will need to use the Redeployment tool.

     

    CRM uses Active Directory to authenticate users. Each user account in AD has an internal number known as a GUID (globally unique identifier).

     

    Creating new user accounts in another domain creates new GUIDs so as far as CRM is concerned these are different user accounts (even if they have the same name) so you need to run the deployment tool.

     

    Note, that even in the same domain if you delete a user account and then later recreate one with the same name it will have a different GUID and is therefore a different user account.

     

     

    Saturday, March 15, 2008 9:16 PM
    Moderator

All replies

  • hi lee,

    CRM uses domain & domain controllers to access users in active directory, authentication and manage roles to these users. If you are moving a domain and domain name remains the same even after moving i.e. there is just an infrastructure change where you are making a domain child of some new domain etc...and there exists a trust relationship as well then you domain will still be able to authenticate your users [provided the domain name remains the same]. So in such scenario you don't need to run redeployment tool.

     

    If domain is moving, its name is changing and there are other infrastructure changes aswell, then there is offcourse need to run redeployment tool.

     

     

    Saturday, March 15, 2008 7:23 AM
  • In a word, yes. You will need to use the Redeployment tool.

     

    CRM uses Active Directory to authenticate users. Each user account in AD has an internal number known as a GUID (globally unique identifier).

     

    Creating new user accounts in another domain creates new GUIDs so as far as CRM is concerned these are different user accounts (even if they have the same name) so you need to run the deployment tool.

     

    Note, that even in the same domain if you delete a user account and then later recreate one with the same name it will have a different GUID and is therefore a different user account.

     

     

    Saturday, March 15, 2008 9:16 PM
    Moderator