web
You’re offline. This is a read only version of the page.
close
Skip to main content

Announcements

Introducing our New Video Series: Community Spotlight
News and Announcements icon
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Microsoft Dynamics CRM (Archived) / Test CRM environment g...
Microsoft Dynamics CRM (Archived)

Test CRM environment groups disappear from active directory

(0) ShareShare
ReportReport
Posted on by Alaa Ramadan 4,130

Hi, 

I have 2  separate environments for CRM, one for Test, second for production

Each environment has its own database server and web server

The issue started when I could not start CRM test, I checked CRM services, all were down, all were configured to run under a predefined domain account, when I attempt to start them one after another, it complains about the user login failure

After contacting the infrastructure team, I have been told that user is not exist in active directory and they had have to recreated it. once created, all services now up and running as normal

But that did not solve the issue, still I cannot start CRM as I'm getting the following error

Unexpected Error
An error has occurred. {1}{0}

I thought I can just re-run the setup will selecting the Repair option. then I got the below error regarding missing group.    

The "CN=PrivReportingGroup {b92f3b27-fe2c-489b-8ec4-f4e6627f65fa}\0ADEL:6b2f930c-acc5-4029-ac54-2958e8c7a2d3,CN=Deleted 

Base on what I see, it seems that the related CRM domain user that used during the initial setup (almost 3 years ago) plus the related security groups created at that time during the installation, all disappeared from the active directory!!

I'm not sure how this could happen. 

I can see the same groups names exist in the active directory but with different unique identifier between the brackets

I know for sure that those groups belong to the production environment

Is it possible to the test environment to point to the same groups? if that OK, how do i do this

Any help is greatly appreciated

Many thanks in advance :)

 

 

*This post is locked for comments

I have the same question (0)
  • Royal King Profile Picture
    Royal King 27,686 on at

    you can't use same group used by other crm server instance. one easy way to resolve this issue is disable your organization from deployment manager and delete it.once organization is deleted from  the deployment manager reimport the organization  using the existing organization database that will add/create right groups in active directory also will add service accounts to newly created group. Reimport doesnot take much time.

  • Suggested answer
    Manoj Batchu Profile Picture
    Manoj Batchu 1,691 on at

    Hello,

    As you say the Groups no more exist in active directory, you need to go for re-installation of CRM which will create new groups in Active Directory.

    1. Backup the MSCRM_CONFIG and Organization_MSCRM Databases.

    2. Uninstall CRM from Test Environment.

    3. Delete MSCRM_CONFIG Database.

    4. Install CRM with selecting Creating a new Deployment.

    5. Import the existing Organization.

    This will ensure that you have all the right groups created in active directory and accounts/users will be added to respective groups when you re-import the organization.

  • Alaa Ramadan Profile Picture
    Alaa Ramadan 4,130 on at

    Thank you All!

    From the above replies , There are two different approaches

    Are those missing security groups typically created during the initial CRM installation or during an organization import?

    Thank you, 

      

  • Suggested answer
    Sartaj Profile Picture
    Sartaj 880 on at

    Hi Alaa Ramadan,

    First of all I want to mention that Dynamics CRM installs Security Groups per deployment and NOT per organization. Means if you have multiple organizations for a particular deployment you will only have one set of security group for that deployment and these security groups creates at the time of CRM server installation itself.

    During installation MS Dynamics CRM creates those security groups within the given Active Directory path. Each security group assigned a GUID and that information in stored in MSCRM_Config database within ConfigSetting table. Internally CRM uses this Guids to validate the existence of these security groups in Active Directory and that is missing in your scenario as all that groups has been deleted.

    So to resolve this issue, you have to reinstall CRM so as it create new security groups, assign new GUID and store in newly created MSCRM_Config database.

    Hope this help to resolve this issue, thanks

    Sartaj

     

     

  • Alaa Ramadan Profile Picture
    Alaa Ramadan 4,130 on at

    Thank you Sartaj!

    This makes sense to me, It means also deleting the organization and re-importing it is not going to help.

    The current deployment done for CRM 4.0, additional customization/plugins  has been added, later on that has been upgraded to CRM 2011

    If i follow your suggestion then i will need to backup the current organization and restore it to the new deployment once completed, Is that correct?

    Thanks,

  • Sartaj Profile Picture
    Sartaj 880 on at

    Hi Alaa Ramadan,

    Yes, take the back of your current organization.It will have all your existing data as well as customization. Once you are done with re installation  restore it back in the new deployment,thanks.

    Sartaj

  • Royal King Profile Picture
    Royal King 27,686 on at

    there is no need to re-install the system. Try to disable ,delete and re-import the organization that will recreate all the groups required to run the system. it does exactly what happens when you re-insatlling the system.

  • Sartaj Profile Picture
    Sartaj 880 on at

    Hi Alaa Ramadan,

    Hope till now you have fixed this issue, please let me know which approach did you tried or worked to resolve this issue ,this will help others if anyone caught in similar situation,thanks.

    Sartaj

  • Alaa Ramadan Profile Picture
    Alaa Ramadan 4,130 on at

    Thank you all,

    I resolved the issue but in different way  

    I managed to restore the deleted security groups from the active directory

    Then I ran CRM installation form the control panel with 'Repair' option

    Once that was done, all back to normal

    Thank you again for your reply

  • jainshweta Profile Picture
    jainshweta 47 on at

    Hi ,

    I got the same situation today. I am not able to find security groups in active directory. What approach should I use. It is my development environment.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

News and Announcements

Introducing our New Video Series: Community Spotlight

Quick Links

Season of Sharing Community Challenge Launch!

Jump in, show your community spirit, and win prizes!

Women in Power Builds Momentum

Expanding mentorship, skilling, and AI innovation

Congratulations to the May Top 10 Community Leaders

These are the community rock stars!

Leaderboard > 🔒一 Microsoft Dynamics CRM (Archived)

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans