Error message when you use Microsoft Dynamics CRM 3.0 Deployment Manager to change a user account in Active Directory: "An error occurred while changing user account"

When you use Microsoft Dynamics CRM 3.0 Deployment Manager to change a user account in the Active Directory directory service, you receive the following error message:Note The user account in Active Directory is linked to a Microsoft Dynamics CRM user.

This problem occurs if the following conditions are true:

• You have no domain administrator rights.
• The Microsoft Dynamics CRM implementation uses the AutoGroupManagementOff registry key. This registry key prevents Microsoft Dynamics CRM from making updates to Active Directory.

This problem occurs because Deployment Manager does not check the AutoGroupManagementOff registry key when you change the user account in Active Directory.

This problem was corrected in Microsoft Dynamics CRM 3.0 Update Rollup 3.
For more information, click the following article number to view the article in the Microsoft Knowledge Base: A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site: Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Microsoft Dynamics CRM 3.0 server

Installation information

Install this hotfix on computers that are running the Microsoft Dynamics CRM 3.0 server and the Microsoft Dynamics CRM 3.0 client for Microsoft Office Outlook.

After you apply the hotfix, verify that the AutoGroupManagementOff registry value under the following registry key is set to 1:

Prerequisites

You must have Update Rollup 2 for Microsoft Dynamics CRM 3.0 installed to apply this hotfix. For more information about Update Rollup 2, click the following article number to view the article in the Microsoft Knowledge Base:

Restart requirement

If you are prompted, restart the computer after you install the hotfix.

Removal information

To remove this hotfix from a computer that is running Windows Server 2003, Windows XP, or Microsoft Windows 2000, use Add or Remove Programs in Control Panel. System administrators can use the Spuninst.exe tool to remove this hotfix from a computer that is running Windows Server 2003, Windows XP, or Windows 2000.

The Spuninst.exe tool is located in the %Windir%\$NTUninstallKB937660$\Spuninst folder.

By default, the AutoGroupManagementOff registry value is set to 0. This means that the AutoGroupManagement functionality is turned on. In this case, when you remap a CRM user from one Active Directory account to another, CRM will automatically remove the old Active Directory user account from the UserGroup group in CRM and add the new Active Directory user account to this group. This action requires domain administrator rights. If you do not have administrator rights, the error message that is described above appears. If the AutoGroupManagement functionality is turned off and you remap a user, the affected users are not automatically added or removed from the UserGroup group in CRM. Instead, the userID in the config database is changed. In this scenario, a domain administrator must add and remove the affected users manually from the UserGroup group.

For more information about the terminology that is used to describe Microsoft software updates, click the following article numbers to view the articles in the Microsoft Knowledge Base: