web
You’re offline. This is a read only version of the page.
close
Skip to main content

Announcements

No record found.

News and Announcements icon
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Microsoft Dynamics CRM (Archived) / Error "Unable to ...
Microsoft Dynamics CRM (Archived)

Error "Unable to find Active Directory object for SID" while provisioning user in CRM 2011 on premise

(0) ShareShare
ReportReport
Posted on by Arvind Bhat 295

Hi,

While trying to provision users from different domains in CRM (CRM server is in a different domain), we are getting a business management error saying "domain logon doesn't exist" and the log file says  "Unable to find Active Directory object for SID". This is happening only for a few users. It's like out of 10, 1-2 don't go through.

The "autogroupmanagementoff" registry key is set to 0. When we set it to 1, the 1-2 users also go through. 

Q1. Why is this issue only with 1-2 users? They are properly set up in AD. This issue has been observed only in the last 2 months.

Q2. If it is set to 0 then would the domain admin have to add the users manually into the security groups? So far we have been provisioning users like this without touching this key and never faced any access issues.

Can you please help me with the answers for the above questions?

Thanks!

*This post is locked for comments

I have the same question (0)
  • Community Member Profile Picture
    Community Member on at

    try to add users like username@domain.com instead of the domain\username.

    Mansoor

  • Manoj Batchu Profile Picture
    Manoj Batchu 1,691 on at

    Hi,

    Even I am facing same issue and posted the question few days back. No response till now :(

    community.dynamics.com/.../170291

  • Verified answer
    Arvind Bhat Profile Picture
    Arvind Bhat 295 on at

    It is because of duplicate replication of the same user in more than one domain controllers. This conflict creates an object in "foreignsecurityprincipals" container (in active directory users and groups) with a prefix as 'CNF' for the object guid. With the help of the user SID, we need to find such CNF objects in this container and delete them. This fixed our problem.

  • Senth Profile Picture
    Senth on at

    Do you know what causing this this duplicate replication issue?

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Introducing the 2026 Season 1 community Super Users

Congratulations to our 2026 Super Stars!

Meet the Microsoft Dynamics 365 Contact Center Champions

We are thrilled to have these Champions in our Community!

Congratulations to the March Top 10 Community Leaders

These are the community rock stars!

Leaderboard > 🔒一 Microsoft Dynamics CRM (Archived)

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans