Overview
Microsoft Dynamics 365 combines CRM (Customer Relationship Management) and ERP (Enterprise Resource Planning) capabilities with web-facing marketing automation tools. Its web tracking component captures visitor behavior on company websites to feed sales pipelines, score leads, and trigger automated marketing journeys. Dynamics 365 is deployed primarily by B2B organizations using the Microsoft ecosystem for their customer engagement and business operations.
What This Script Does
The Dynamics 365 web tracking script loads from Microsoft's servers and monitors visitor behavior to build customer profiles within the CRM.
Tracking Script
- Script loaded: The Dynamics 365 Marketing tracking script (also known as the Customer Insights - Journeys tracking tag) loads from
mkt-cdn.dynamics.com. It initializes a tracking session and begins capturing visitor interactions. - Behavioral tracking: Records page views, time on page, scroll depth, and navigation paths. Form submissions on Dynamics 365 marketing forms capture contact details directly into the CRM.
- Cookies set:
msd365mkttr— First-party cookie. Tracking identifier that links the anonymous visitor session to a Dynamics 365 contact record once the visitor identifies themselves (e.g., through a form submission or email click).msd365mkttrs— First-party cookie. Session-level tracking cookie for correlating page views within a single visit.d365mkt-cookie-consent— First-party cookie. Records whether the visitor has consented to tracking cookies on the current site.
- Event tracking: Custom events can be configured to track specific interactions — button clicks, video plays, file downloads, and e-commerce actions.
- Contact matching: When a visitor clicks a link in a Dynamics 365 marketing email, URL parameters identify the contact, and the tracking script links all prior anonymous browsing history to that known contact record in the CRM.
Embedded Forms
Dynamics 365 marketing forms embed via iframes or JavaScript from assets-can.dynamics.com (or regional variants). These forms submit data directly to the Dynamics 365 CRM, creating or updating contact records.
Consent & Compliance
Microsoft Dynamics 365 web tracking falls under marketing and analytics consent categories.
Under GDPR and ePrivacy, the Dynamics 365 tracking script requires explicit consent. It sets persistent first-party cookies that create unique visitor identifiers, tracks browsing behavior across pages, and links anonymous activity to identified individuals through email click-matching. This constitutes both storage of non-essential cookies under the ePrivacy Directive and processing of personal data for profiling under GDPR Articles 6 and 22. Dynamics 365 provides built-in consent management features, including the d365mkt-cookie-consent cookie and configurable consent forms.
Under CCPA/CPRA, the behavioral tracking and contact profiling constitute processing of personal information. The lead scoring and automated journey triggers based on website behavior may constitute automated decision-making. If the CRM data is shared with third-party marketing tools, this could constitute "sharing" for cross-context behavioral advertising.
Microsoft's data processing is covered under the Microsoft Products and Services Data Protection Addendum, and data residency options are available for EU-based processing.
Should You Block This Without Consent?
Yes. Dynamics 365 web tracking sets persistent identification cookies, records detailed browsing behavior, and links anonymous visits to identified individuals for sales and marketing purposes. Block the tracking script and marketing forms until the user grants consent. The tracking script's own consent mechanism (d365mkt-cookie-consent) can be integrated with the site's consent management platform for coordinated consent handling.
Is Microsoft Dynamics 365 GDPR compliant?
Microsoft Dynamics 365 typically loads marketing and analytics trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So Microsoft Dynamics 365 can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads Microsoft Dynamics 365, not on Microsoft Dynamics 365 itself.
Consent Categories
Also Known As
Industries
Tracked Domains (2)
dynamics.comMarketingdynamics.com is a marketing domain operated by Microsoft Dynamics 365, used to serve ads, build audiences, and measure ad conversions.
crm.dynamics.comMarketingcrm.dynamics.com is a marketing domain operated by Microsoft Dynamics 365, used to serve ads, build audiences, and measure ad conversions.
Frequently Asked Questions
Other Microsoft Products
Related Vendors

Manage consent for Microsoft Dynamics 365
ConsentStack automatically detects and manages Microsoft Dynamics 365 trackers so your site stays compliant with global privacy regulations.