I'm in the process of upgrading CRM 4 to 2011 and while installing my dev environment I get an interesting error; interesting for the fact that it relates with AD infrastructure and not an AD permission issue, also is not referring to what is exactly causing the issue:
Name translation: Could not find the name or insufficient right to see name
(Exception from HRESULT: 0x80072116)
The error message says that it can't resolve something, and the issue is related with a user account given for the sandbox service, although if you give an incorrect user account on the previous step, it will automatically error with; user account is invalid.
The installer could not resolve the AD account because the Global Catalogue on that site was not aware of the AD account. The user account was not replicated to the Global Catalogue site where I'm trying to set up CRM. The below diagram is an example of two sites with a DC GC which replicate between each other. Global catalogues store AD objects, if you create a user account in NYC site and if AD replication is set to occur only the next day due to limited bandwidth available, user accounts in New York will only be available in the London site the next day.
If you have the permissions you can trigger AD replication between two servers using Active Directory Sites and Services. Open ADSS and expand one of the sites, open the servers folder and highlight one server, on the right you see NTDS Settings double click and you should see a number of connections to other Servers in different sites. right click and select Replicate Now.
That message also refers to insufficient rights to view it, this could also be lack of permissions to access the AD object.
Manually triggering AD replication, has fixed the issue.