Before I stick my neck out and deploy Crowd in a live IT department...

[Robert Finley]

First time deploying alongside an Active Directory Server. I need to assure IT I can't break/hack their stuff with Crowd.

What allows/prevents Crowd from making changes in Active Directory?

[Colin Goudie · Accepted solution]

Two ways.

1. The user that crowd is setup to bind to AD can be configured in AD to not be able to write to AD.

2. The directory permission setup can be configured to only READ not WRITE to AD.