web
You’re offline. This is a read only version of the page.
close
Skip to main content
Community site session details

Community site session details

Session Id :
Microsoft Dynamics CRM (Archived)

Error "Unable to find Active Directory object for SID" while provisioning user in CRM 2011 on premise

(0) ShareShare
ReportReport
Posted on by 295

Hi,

While trying to provision users from different domains in CRM (CRM server is in a different domain), we are getting a business management error saying "domain logon doesn't exist" and the log file says  "Unable to find Active Directory object for SID". This is happening only for a few users. It's like out of 10, 1-2 don't go through.

The "autogroupmanagementoff" registry key is set to 0. When we set it to 1, the 1-2 users also go through. 

Q1. Why is this issue only with 1-2 users? They are properly set up in AD. This issue has been observed only in the last 2 months.

Q2. If it is set to 0 then would the domain admin have to add the users manually into the security groups? So far we have been provisioning users like this without touching this key and never faced any access issues.

Can you please help me with the answers for the above questions?

Thanks!

*This post is locked for comments

I have the same question (0)
  • Senth Profile Picture
    on at
    RE: Error "Unable to find Active Directory object for SID" while provisioning user in CRM 2011 on premise

    Do you know what causing this this duplicate replication issue?

  • Verified answer
    Arvind Bhat Profile Picture
    295 on at
    RE: Error "Unable to find Active Directory object for SID" while provisioning user in CRM 2011 on premise

    It is because of duplicate replication of the same user in more than one domain controllers. This conflict creates an object in "foreignsecurityprincipals" container (in active directory users and groups) with a prefix as 'CNF' for the object guid. With the help of the user SID, we need to find such CNF objects in this container and delete them. This fixed our problem.

  • Manoj Batchu Profile Picture
    1,691 on at
    RE: Error "Unable to find Active Directory object for SID" while provisioning user in CRM 2011 on premise

    Hi,

    Even I am facing same issue and posted the question few days back. No response till now :(

    community.dynamics.com/.../170291

  • Community Member Profile Picture
    on at
    RE: Error "Unable to find Active Directory object for SID" while provisioning user in CRM 2011 on premise

    try to add users like username@domain.com instead of the domain\username.

    Mansoor

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Andrés Arias – Community Spotlight

We are honored to recognize Andrés Arias as our Community Spotlight honoree for…

Leaderboard > 🔒一 Microsoft Dynamics CRM (Archived)

#1
Aric Levin - MVP Profile Picture

Aric Levin - MVP 2 Moderator

#2
MA-04060624-0 Profile Picture

MA-04060624-0 1

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans