Tuesday, April 28, 2009

Privileges for CRM Installation User

You must give sufficient privileges to Microsoft Dynamics CRM installation user. The easiest approach is for the installation user (perhaps CRM Admin) to be a member of the Domain Admins group, which is defined in Active Directory Users and Computers.

The best practice is to create a new domain user account for the installation of CRM, instead of using the built-in Administrator account. In this case, give him the minimum amount of privileges which are:
  • Ability to create objects within Active Directory OUs that is the target parent OU for installing Microsoft CRM. (i.e. Group policy creator owner. See image below.)
  • Local Administrator on the computer where Microsoft Dynamics CRM is being installed.
  • SQL Server Administrator Privilege.
  • IIS Server Local Administrator Privilege.

No comments:

Post a Comment