web
You’re offline. This is a read only version of the page.
close
Skip to main content
Community site session details

Community site session details

Session Id :
Microsoft Dynamics CRM (Archived)

How to identify CRM AD groups GUID

(0) ShareShare
ReportReport
Posted on by 550

Hi.

We are migrating our CRM servers to a new domain. We already managed to migrate our test environment but with some troubles for the 'security groups'

There is a list of security groups created in Active Directory during a CRM installation (from http://support.microsoft.com/kb/946677):

  • PrivUserGroup
  • PrivReportingGroup
  • ReportingGroup
  • SQLAccessGroup
  • UserGroup

These groups are created with 'GUID' to make them unique, for example the GUID for the TEST system (with 2 entities created) is {3f8f61e2-7667-43f7-86c6-1c2225d71aee} so all 'test' groups are named as PrivUserGroup {3f8f61e2-7667-43f7-86c6-1c2225d71aee}.

These groups have to be manually migrated / copied (at least this is what we found during test migration) from old to new domain.

In LIVE environment, where we have only 1 entity, we have found 3 different sets of these AD groups, with different GUIDs. Maybe this comes from some failed initial installation or something like this.

Anyway, the question is: is there a way to identify the correct set of groups to copy/migrate?

I assume there should be a value in the CRM entity / configuration to identify the AD groups... I could ask to copy all of them, but I would not import 'trash' in th enew domain, and I could also do by 'trying', but I would prefer to have the correct setting done from the beginning...

Many thanks

*This post is locked for comments

I have the same question (0)
  • Suggested answer
    jlattimer Profile Picture
    24,562 on at
    RE: How to identify CRM AD groups GUID

    If you look in the ConfigSettings table in the MSCRM_CONFIG database - it will show the GUIDs of the various AD groups - you should be able to match them up.

    Make sure not to look at the GUID in the actual name - but on the object's properties (View menu - turn on Advanced Features) and the Attribute Editor tab - you should be able to find the objectGUID and it should match the table value. 

  • Claudio Casonato Profile Picture
    550 on at
    RE: How to identify CRM AD groups GUID

    Hi.

    Many thanks for your answer.

    Is this check via SQL server manager? I found the table and running the default query for fist 1000 rows returned only 1 row and all groups appear to have a different GUID, and I understand this is not correct...

  • Verified answer
    jlattimer Profile Picture
    24,562 on at
    RE: How to identify CRM AD groups GUID

    Yes - all the groups from the table will have a different GUID - that GUID will correspond with an object in AD. Like I said, you have to use the steps above to find the actual 'objectGUID' for each CRM group/

  • Verified answer
    Sneha Padwal Profile Picture
    850 on at
    RE: How to identify CRM AD groups GUID

    Hello,

    You can run the following query on your Org_MSCRM database in SQL:

    select SQLAccessGroupName,PrivReportingGroupName,ReportingGroupName from OrganizationBase

    This will return the Group Names with their GUIDs and you can identify them in your AD.

    Thanks,

    Sneha P

  • Claudio Casonato Profile Picture
    550 on at
    RE: How to identify CRM AD groups GUID

    Thanks to both of you.

    I run the script and I realised that there are 2 different kind of information:

    • The Object ID (with a code different per each group)
    • The Object name (where the GUID is the same for all groups).

     I also noticed that for PrivilegeUserGroup and UserGroup there is only the ID and no Name - at least, I've been unable to find the Name in the database.

    I assume that the AD object created for these PrivilegeUserGroup and UserGroup the AD objects will have 'Names' as:

    • EAMEDM\PrivUserGroup   {d3092e60-0177-42cd-af59-45aaf1c3fed0}
    • EAMEDM\UserGroup   {d3092e60-0177-42cd-af59-45aaf1c3fed0} 

     and my AD colleages will be able to find them either under the name or the ID.

    Anyway... quite complex!

    PrivilegeUserGroupID
    E55354E0-7913-41D9-AAED-26B51B3DFD05
    UserGroupID
    16BAD528-D5B0-462E-9F50-F8EEFFA7C042
    SQLAccessGroupName
    EAMEDM\SQLAccessGroup   {d3092e60-0177-42cd-af59-45aaf1c3fed0}
    SqlAccessGroupId
    776EE621-0E46-483B-8720-03DDF5C98C5D
    PrivReportingGroupName
    EAMEDM\PrivReportingGroup   {d3092e60-0177-42cd-af59-45aaf1c3fed0}
    PrivReportingGroupId
    02178530-CD93-4546-A1E4-D4D0492BCA95
    ReportingGroupName
    EAMEDM\ReportingGroup   {d3092e60-0177-42cd-af59-45aaf1c3fed0}
    ReportingGroupId
    9017727F-EAE7-4E72-AA06-87CD115638B2
  • Claudio Casonato Profile Picture
    550 on at
    RE: How to identify CRM AD groups GUID

    Hi again...

    We are now migrating the SQL database server to a new machine, with new server name and new IP address. I already have the procedure, but while checking all groups, using the suggestions you gave me, I noticed that there is no more 'UserGroup' ID set in the 'ConfigSetting' table in MSCRM_CONFIG.

    I've been able to identify all the other groups (as we did a re-deployment, the IDs and GUIDs changed from last time), but not this 'UserGroup'.

    The CRM is working, so I'm confused...

    Maybe it is better if I do a new full redeployment for the new DB server, in order to have the groups recreated and reassigned properly?

    Many thanks

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Abhilash Warrier – Community Spotlight

We are honored to recognize Abhilash Warrier as our Community Spotlight honoree for…

Leaderboard > 🔒一 Microsoft Dynamics CRM (Archived)

#1
HR-09070029-0 Profile Picture

HR-09070029-0 2

#1
UllrSki Profile Picture

UllrSki 2

#3
ED-30091530-0 Profile Picture

ED-30091530-0 1

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans