Tuesday, April 19, 2011

Managing Active Directory User Accounts from CRM 2011

I upgraded my ADUserHelper (CRM4.0) plugin to CRM 2011 version today. The feature will be the same as previous one. Below is the list of steps that my plug-in works for AD integration:
  1. Enquiry "Domain User Name" in Active Directory when User Profile is saved (pre-create) in CRM
  2. If plug-in cannot find user in AD, it will automatically create an account based on saving profile's data
  3. If user already exists in AD, it will skip the account creation steps
  4. Once User Profile is saved, MS CRM will automatically add ReportingGroup and UserGroup to specific AD user account (This is a feature of CRM)
 You may need to provide following configuration settings to run plug-in successfully
  1. Default Password for all users
  2. DNS Name (or) IP Address
  3. Admin User Account which has permission to create user account in Active Directory
  4. Admin User Password
  5. LDAP Path (Optional, provide it if you want to create CRM user under specific OU)
For easier management, we create an OU to put all CRM's AD user accounts in one location. We also create one admin account to manage that OU for user accounts creations. If you want to allow users to change their Default Password from CRM, please read this article and follow the instructions. For us, we host an asp page (aexp4b.asp) in IIS and provide a link in CRM site-map to use "Change Password" feature.

I successfully tested this plug-in on Windows Server 2008R2 64bit Machine.Feel free to use this application. Either leave comment or email me if you want to know further information or give suggestion to me. But, please use it as your own risk :)

Download Link
Plugin Registration Tool (CRM 2011 SDK)

Reference:

1 comment:

varun sabharwal said...

Hi Thuta, thanks for great article. I am not able to find the source code for the ASP Page. Is it possible for you to share that.

Post a Comment