The Active Directory requirements are as follows:

• The computer that runs Microsoft Dynamics CRM Server and the computer that runs SQL Server, where the Microsoft Dynamics CRM databases are located, must be in the same Active Directory domain.
• The Active Directory domain where the Microsoft Dynamics CRM Server is located must run in Windows 2000 native, Windows Server 2003 interim, Windows Server 2003 native, or any Windows Server 2008domain modes.
• The Active Directory forest where the Microsoft Dynamics CRM Server is located can run in Windows 2000, Windows Server 2003 interim, or Windows Server 2003 forest modes.
• The accounts that are used to run the Microsoft Dynamics CRM services must be in the same domain as the computer that is running Microsoft Dynamics CRM Server.
• The Microsoft Dynamics CRM security groups (UserGroup, PrivUserGroup, SQLAccessGroup, ReportingGroup, PrivReportingGroup) must be in a single OU. However, the OU does not have to be in the same domain as the computer that is running Microsoft Dynamics CRM.
• For users who access Microsoft Dynamics CRM from another domain, a one-way trust must exist in which the domain where the Microsoft Dynamics CRM Server is located trusts the domain where the users are located.

  Note

  If you are not using the Microsoft Dynamics CRM Connector for SQL Server Reporting Services, a two-way trust is required for users in other domains to run reports successfully.