Sample server XML configuration file for installing with pre-created groups

  • Article

 

Applies To: Dynamics 365 (on-premises), Dynamics CRM 2016

By default, Setup creates four Active Directory security groups that are used by Microsoft Dynamics 365. You can create these groups in advance and then provide the information for the groups in the Setup configuration file.

To use the pre-created Active Directory directory service security groups, create an XML configuration file that uses the LDAP distinguished name syntax that is similar to the following example. Modify the variables as appropriate.

For example, the following sample would be used when the Organizational unit (OU) where the pre-created groups (PrivUserGroup, SQLAccessGroup, ReportingGroup, and PrivReportingGroup) are located is named CRM and the full domain name where the OU is located is sales.contoso.com.

Important

The user who runs Microsoft Dynamics CRM Server Setup must have appropriate permissions in Active Directory to add users to the pre-created groups. More information: Permissions required to run Setup with pre-created groups

Because the organizational unit will be specified when you use the Active Directory groups <GROUPS> element, you cannot specify the organizational unit again using the <OU> element.

The <Groups> element must be inside the <Server> and <CRMSetup> elements. For syntax structure, see Microsoft Dynamics CRM Server XML configuration file.

<Groups AutoGroupManagementOff="false">
    <PrivUserGroup>CN=PrivUserGroup,OU=CRM,DC=sales,DC=contoso,DC=com</PrivUserGroup>
    <SQLAccessGroup>CN=SQLAccessGroup,OU=CRM,DC=sales,DC=contoso,DC=com</SQLAccessGroup>
    <ReportingGroup>CN=ReportingGroup,OU=CRM,DC=sales,DC=contoso,DC=com</ReportingGroup>
    <PrivReportingGroup>CN=PrivReportingGroup,OU= CRM,DC=sales,DC=contoso,DC=com</PrivReportingGroup>
</Groups>

Permissions required to run Setup with pre-created groups

  • Active Directory Users group membership

  • The following permissions for the PrivUserGroup, SQLAccessGroup, ReportingGroup, and PrivReportingGroup Active Directory groups:

    • Read

    • Write

    • Add/Remove self as member

    • Advanced permissions

      • List Contents

      • Read All Properties

      • Write All Properties

      • Read Permissions

      • Modify Permissions

      • All Validated Writes

See Also

Microsoft Dynamics CRM Server XML configuration file
Install Microsoft Dynamics CRM Server roles using the command prompt

© 2017 Microsoft. All rights reserved. Copyright1