CRM 2011 – Trying to work out what active directory groups are for different organisations

In you development environment or maybe in live you might have numerous CRM organisations installed.

Each CRM organisation will have a separate batch of four active directory groups which CRM uses.

  1. UserGroup
  2. ReportingGroup
  3. PrivUserGroup
  4. SQLAccessGroup

If you create more than one organisation you will find yourself with 4 more active directory groups with no real way to tell what groups go with which organisation.

The only identifer between the groups is a guid in the name of each active directory group.

You can click on the AD group to see what users are members of the group but if it’s a development environment they are likely to be similar anyway.

This is a picture of my the active directory showing my dev AD groups.   Yep loads of them

This can also be a problem on live installations because failed installations will also create CRM AD groups and not remove them.

So how do you link the guid in the AD groups to a CRM organisation.  If you run the SQL query below on the MSCRM_CONFIG database on the Organization table you can get the name and guid for each organisation.

select databasename, friendlyName, id
from [MSCRM_CONFIG].[dbo].[Organization]

databasename               friendlyName id
Test_MSCRM               Test4E7A1C5A-197E-DF11-B9F6-00155D6A7C15
Demo_MSCRM             Demo     4CB007A4-9B51-E111-897F-00155D6A7C22

oddly the first organisation added seemed to be ok but then the other guids didn’t match up at all and I am left still searching for definitive method to link these.


I have also seen the guid in the trace files but I can’t quite remember where I found it.

5 thoughts on “CRM 2011 – Trying to work out what active directory groups are for different organisations

  1. Chris Cooke June 8, 2012 / 5:26 pm

    I’ve seen the organization guids get out of sync with the organization guid. In those cases you can find the correct group names running the following script against the org_MSCRM database.

    SELECT SqlAccessGroupName,ReportingGroupName,PrivReportingGroupName FROM OrganizationBase


  2. Andrew Rogal December 18, 2013 / 9:22 pm

    I have learned new things from a blog post. Also a thing to I have
    noticed is that in most cases, FSBO sellers will certainly reject people.
    Remember, they would prefer to never use your providers.
    But if an individual maintain a steady, professional connection, offering aid and remaining in contact for about four to five weeks,
    you will usually be capable to win an interview. From there, a house listing follows.

    Many thanks


  3. VISIT THIS LINK January 20, 2014 / 4:29 am

    Great site you have here but I was wondering if you knew of any discussion boards that cover the same topics talked about in this article?
    I’d really like to be a part of community where I can
    get feedback from other knowledgeable individuals that share the same interest.
    If you have any recommendations, please let me know.



Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s