We recently came across an issue where importing a Domain Local Group into Microsoft Dynamics AX 2012

raises an infolog error message:

The Active Directory user or group does not exist. Contact your network administrator.

However we don't get an error if you imported a Domain Global or Universal group instead. This is by-design.

The Domain Local scope is intended for one single domain. However the Global or Universal Group Scope has a much wider scope and visibility for usage within domains. These are the group types supported within AX 2012.

 

Summary:

Use only Domain Global or Universal group scopes when importing them in to Microsoft Dynamics AX 2012. For more information on the different domain group scopes please see the references section.

 

 

References:

Group Scope


Understanding Group Accounts

 

--author: Girish Narasoji Rao Chandrappa