Adding CRM Users from Trusted Domain

When CRM is installed, the following Active Directory groups are created with group scope set as GLOBAL in the same Domain for which the CRM was installed:

  • PrivReportingGroup
  • PrivUserGroup
  • ReportingGroup
  • SqlAccessGroup

In case the client is having users from 2 different domains in which one domain trusts the other, you will need to change the AD groups scope above to LOCAL instead of GLOBAL to allow creation of users in CRM from the trusted domain, in case you didn’t do that, you will face an unexpected server error when saving the CRM user account although the user information will be retrieved normally from the trusted domain.