Dynamics Community Forum Thread Details

Wrong ActiveDirectoryGUID in System User Table

We support a CRM on-premise installation for a customer which is migrating its users to a new domain. The CRM servers are remaining on the old domain and a domain trust relationship has been setup between the old domain and the new one, so that CRM can authenticate the users on the new domain.

Several thousand users have migrated to the new domain by changing their User Name in CRM to be their new login. This has worked fine for all but 50 users. These users are able to access CRM ok, but we have noticed that for these users the ActiveDirectoryGUID that is being stored in the System User table is not the GUID of the AD user from the new domain. It seems to be the GUID of the Foreign Security Principle object that is created on the old domain to map to the user in the trusted domain. This is causing issues with a custom interface that is passing the ActiveDirectoryGUID to identify the user. In a test environment we have tried setting the ActiveDirectoryGUID and this has worked with no side affects, but we are not able to explain why it is happening in the first place.

Quick Links

Leaderboard