locked
Organization Unit RRS feed

  • Question

  • I am deploying CRM 2011 on a single server running SBS 2008. I understand that on SBS it is not common to create OUs. So during the installation of CRM should I

    1) chose the DC, i.e. DC=[...],DC=local
    2) use one of the default OUs, e.g. OU=Domain Controllers,DC=[...],DC=local
    3) create and use a custom OU, e.g. OU=CRM,DC=[...],DC=local

    In case of 2) and 3) should I put the users for the various services under the OU? Note when users are being created through the 'Windows SBS Console' you cannot define into what OU they should be added to.

    Tuesday, February 28, 2012 10:12 PM

All replies

  • If you are installing CRM with default administrator then you can select any of the above three options, because administrator have read and write permissions in the entire domain.

    I recommend you to create a new OU and select the new OU while installing the CRM. This holds all the CRM Server roles at one place. Its easy to troubleshoot also.

    Regards,


    Khaja Mohiddin http://www.dynamicsexchange.com/ http://about.me/KhajaMohiddin

    • Proposed as answer by Khaja Mohiddin Wednesday, February 29, 2012 10:57 AM
    Tuesday, February 28, 2012 10:53 PM
  • Khaja, thanks for the reply. I have different users that I use like this:

    CRM:
    Application service: [Domain]\crmadmin
    Deployment Web Service: [Domain]\crmadmin
    Sandbox Processing Service: [Domain]\crmsandbox
    Asynchronous Processing Service: [Domain]\crmadmin

    SQL:
    SQL Server Agent/Database Engine/Analysis Services/...: [Domain]\sqlservice
    SQL Server administrators: [Domain]\Adminstrator,
                                          [Domain]\crmadmin,
                                          [Domain]\crmsandbox,
                                          [Domain]\sqlservice,
                                          [Domain]\networkadmin
    Administrative permissions for Analysis Services: same users as above

    So if I chose option 3) would I have to put these users under a particular OU or can I just leave them as SBS Console did create them?

    Tuesday, February 28, 2012 11:02 PM
  • These are the services and we are discussing about the OU. So i suggest you to create new OU for CRM2011 and give full permissions to crmadmin(or any other user with which you install CRM) to create and delete modify roles to that particular OU.

    If you dont give full permissions then you will get error while installing CRM.

    Regards,


    Khaja Mohiddin http://www.dynamicsexchange.com/ http://about.me/KhajaMohiddin

    Tuesday, February 28, 2012 11:14 PM