Hi Everyone,

I have a demo version of CRM 1.2 installed on a cleanly installed Windows
2003 SP1 server (nothing else installed).

The install went ok (no errors, nothing untoward in the event log) but when
I try and add some users using the User Manager Wizard in the CRM deployment
manager something strange happens....
Not all of my users appear in the list that the Wizard gives me, meaning
that I can't assign a CRM licence to particular users.

I've tried this a couple of times and it seems to be the same users that are
missing.
This doesn't seem to be group membership or rights specific - some of the
users that are missing are domain admins.

Our Active Directory is Windows 2003, running in 2003 mode.

I've searched KB, and found an issue where similar things can happen with
more than 1000 users - we've go nowhere near 1000 users (haven't even got
100) - I made the registry change anyway but it didn't make any difference.

Does anyone have any idea what this could be ?

Thanks in Advance,

Peter.

This can happen when user accounts have been migrated from Novell NDS, or NT
domains

The user must have passwords, otherwise they will not be deisplayed by
Deployement Manager

There is some user account AD attribute called UserAccountControl I think ,
it must be set to 512 which it is not in cases like no passwords

"peteroddan" <proddan@higgs.co.uk> wrote in message
news:78E4BBAF-E7D9-4AF7-A3A6-69C909EB05E6@microsoft.com...

Hi Peter,

Thanks very much for the reply.
All the user accounts definitely have passwords, althought they may have
been migrated across from a Windows NT Domain a number of years ago.

Is there an easy way that I can check the AD attribute you mentioned ?

Thanks,

Peter.

"Peter Lynch" wrote:

Here's how:-

On the Windows 2003 server cd there is a Support Tools install that can be
installed on the Ad machine.
1. Once you have this installed go to (Start | Programs | Windows 2000
Support Tools | Tools | ADSI Edit).

2. Expand Domain NC (domain name).

3. Expand DC=domain controller name.

4. Expand CN=Users.

5. Find the user that is not showing up. Right click on the user and choose
properties.

6. In the properties window under the Attributes tab click on the drop down
for Select a property to view and choose userAccountControl.

7. This will give you a Value number.

8. Take a look at this microsoft KnowledgeBase article 305144
<http://support.microsoft.com/default.aspx?scid=kb;en-us;305144> to find out
what that number means.

If a password is not required for the user then that could be one reason why
the user is not showing up.

9. From within ADSI edit you can change the value of the user. A value of
512 means normal user. This user would then show up in User Manager. Compare
the values with the users that do show up.

Note - When changing the userAccountControl you are changing the settings of
the user so please be careful when making these changes

It can probably be scripted to do bulk updates - but don't ask me how!

Peter

"peteroddan" <proddan@higgs.co.uk> wrote in message
news:F2437D8C-F883-42F5-937D-B09C2F98D3E0@microsoft.com...

This worked for our company. We took a chance with typing 512 and it
worked. We originally had 544.

I looked all over in Active Directory and Group Policy and didn't find a GUI
way to change the value. It may have something to do with how we migrated
users from a SBS 2000 installation ?



"Peter Lynch" wrote: