Security groups required by Microsoft Dynamics CRM 4.0

Microsoft Dynamics CRM uses several security groups in Active Directory.

Security Group	Members
PrivUserGroup	The account that the CRMAppPool application uses The account that the ASP.NET process model uses The user account that ran the installation The computer account on which the E-mail Router is installed
PrivReportingGroup	The account for the computer on which the Microsoft Dynamics CRM Data Connector for Microsoft SQL Server Reporting Services is installed
ReportingGroup	All Microsoft Dynamics CRM user accounts (including the user account that ran the installation)
SQLAccessGroup	The account that the CRMAppPool application uses The account that the ASP.NET process model uses
UserGroup	All Microsoft Dynamics CRM user accounts (including the user account that ran the installation)

To add the NetworkService or LocalSystem account to a group, add the computer account.