Sign in
Microsoft.com
 
Microsoft
 
 
 

locked
How to specify the Organizational Unit when deployment Dynamics CRM 2011? RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    I am trying to deploy my own Dynamics CRM 2011. I see in the CRM Installing Guide  that:

    "On the Select the Organizational Unit page, click Browse to display your Active directory structure. Select the location where you want the Microsoft Dynamics CRM organizational unit to be installed into, click OK, and then click Next. Microsoft Dynamics CRM security groups are created in this organizational unit."

    So, what does the orgnization unit mean? Can I consider it as some kind of "path" where my CRM security groups will be stored in?

    And what is the Dynamics CRM security group for?

    I am in corpnet which already has a domain. Can I leverage this domain for the orgnizational unit?



    Monday, March 18, 2013 3:24 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    The organization is a isolated space for a company. You could have multiple organizations with independent solutions, customizations and users in each organization. Organizations on a server do not share anything. Only there database should be same, and there instance differs. The organization is not a path. On install of CRM you should only provide a name and report server url for it.

    About the domain, you could use your pre installed domain and users. The users could use their CRM with their windows login user.

    If the answer helped you, remember to mark it as answer.

    Monday, March 18, 2013 4:35 PM
    Moderator

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    it will create security groups used for CRM access/permissions. You dont have to have a specific OU setup for CRM but a lot of people create an OU called CRM just to stay organized. The OU is basically a folder that will hold the security groups.

    One thing you will need is read/write access to the OU. If you dont have domain admin privileges you might have some issues getting CRM installed.

    Monday, March 18, 2013 4:34 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    The organization is a isolated space for a company. You could have multiple organizations with independent solutions, customizations and users in each organization. Organizations on a server do not share anything. Only there database should be same, and there instance differs. The organization is not a path. On install of CRM you should only provide a name and report server url for it.

    About the domain, you could use your pre installed domain and users. The users could use their CRM with their windows login user.

    If the answer helped you, remember to mark it as answer.

    Monday, March 18, 2013 4:35 PM
    Moderator
  • Question
    Sign in to vote
    0
    Sign in to vote

    it will create security groups used for CRM access/permissions. You dont have to have a specific OU setup for CRM but a lot of people create an OU called CRM just to stay organized. The OU is basically a folder that will hold the security groups.

    One thing you will need is read/write access to the OU. If you dont have domain admin privileges you might have some issues getting CRM installed.


    Does it mean  that all the users of my CRM deployment must be in that security group? How is the CRM user be authenticated and authorized?
    Tuesday, March 19, 2013 1:53 AM
  • Question
    Sign in to vote
    0
    Sign in to vote


    UserGroup
    All Microsoft CRM users. This group is updated automatically as users are added and removed from Microsoft CRM. 

    ReportingGroup
    A group that contains all users within Microsoft CRM. This group is updated as users are added to Microsoft CRM. Users in this group have read-only access to the filtered views in the Microsoft CRM database. 

    PrivUserGroup
    Privileged Microsoft CRM user group for special administrative functions. 

    SQLAccessGroup
    A group that contains Microsoft CRM ASP.NET account and other service accounts. Members in this group have full access to the Microsoft CRM database and this group is used by the Microsoft CRM platform layer. End users should never be added to this group. Now instead of adding each user and granting him access to SharePoint Libraries, try adding these security groups and setting permissions as given in the screenshot below:


    Tuesday, March 19, 2013 3:33 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    Try

    http://mscrmshop.blogspot.in/2011/11/installing-crm2011-with-precreated-ad.html

    http://xrmadventures.wordpress.com/2011/03/31/microsoft-crm-2011-application-install-with-pre-created-ad-groups/

    Remember to mark this as answer, if it helps you

    Friday, March 22, 2013 6:27 AM