Hello Brosello, Hope you are well. The process you are describing is totally fine. At the stage where you install CRM 2015 on a different VM, this will create unique security groups on whatever OU you decide. It can be the same of production or not. They will not conflict. You can then run 2 orgs with the same name on 2 different servers, because the DNS you use for both machines is different and points to a different IP address. url: prod.domain.org/proddbname vs crm2015.domain.org/proddbname For the sake of simplicity tho, you may want to evaluate to change the friendlyname of the organization when you import PROD on crm2015, so you are sure you are logged in at the upgrade test DB and not prod itself. Please let us know if anything is not clear above and we will gladly help.