Adding users to Active Directory groups

We have installed CRM 3.0 on a server using a domain admin account.
We also have a CRM Admin account on our domain that is used to
administer CRM. This account is not a domain admin. We ahve noticed
that when the CRM account adds a new user to CRM, the network account
gets added to the UserGroup in AD. Can someone explain how that user
account gets added to the AD group when the CRM admin account is not a
domain admin and the site is running under Local System account? Is
it still using the domain admin credentials that we used to install
CRM?

Peter
Tue Nov 27 10:47:16 PST 2007

The CRM Admin account simply has rights to add users to each of the four
groups in the CRM OU



<yesplease151@gmail.com> wrote in message
news:9c28f9a0-9561-4949-a11b-4640efd17031@a35g2000prf.googlegroups.com...
> We have installed CRM 3.0 on a server using a domain admin account.
> We also have a CRM Admin account on our domain that is used to
> administer CRM. This account is not a domain admin. We ahve noticed
> that when the CRM account adds a new user to CRM, the network account
> gets added to the UserGroup in AD. Can someone explain how that user
> account gets added to the AD group when the CRM admin account is not a
> domain admin and the site is running under Local System account? Is
> it still using the domain admin credentials that we used to install
> CRM?

yesplease151
Tue Nov 27 13:14:47 PST 2007

I figured it would have to, but we have never given that account
access, nor do I see any rights on those groups giving that account
access. It would make a little more sense if we specified rights, but
CRM never even knew about the "CRM Admin" account until we set it up
as a user. In fact, any user that is an admin in CRM has the ability
to create/add a user to CRM, which in turn gets added to the UserGroup
in AD.

Peter
Tue Nov 27 14:10:58 PST 2007

These rights EITHER need to explicitly pre-exist, OR are granted at CRM
installation time to all CRM admins by the installing user if it is a Domain
Admin (at that time)

It's all as described in the Implementation Guide


<yesplease151@gmail.com> wrote in message
news:b6113878-a351-4b39-baab-651ca291b13b@s8g2000prg.googlegroups.com...
>I figured it would have to, but we have never given that account
> access, nor do I see any rights on those groups giving that account
> access. It would make a little more sense if we specified rights, but
> CRM never even knew about the "CRM Admin" account until we set it up
> as a user. In fact, any user that is an admin in CRM has the ability
> to create/add a user to CRM, which in turn gets added to the UserGroup
> in AD.

yesplease151
Wed Nov 28 05:18:17 PST 2007

Thanks, that makes more sense.