I have to agree with Tech-O. This product is clearly still very immature and riddled with errors and implementation issues. I'm hoping that Symantec will get most of these issues ironed out in the next few releases, or else I'm not sure if we'll be able to make the move to 7.
Here are a couple of the issues I've encountered while trying to build a sandbox SD7 environment:
-- SQL off-box is possible, but a major pain. You'll have to create an AD service account for SD7 and do some manual configuration of IIS to make SD7 run as that account, then make sure that the account has rights to SQL to create and modify the database.
-- AD authentication is also possible, but a pain. Instead of being simple, clean, & straight-foward (like HelpDesk 6.5, where you would have roles inside the app that you could assign/map to AD groups), instead SD7 imports your AD users and populates its own copy of each account in the database, then does the same for your AD groups (but doesn't bring over the group memberships). So when it's all said-and-done, you have to grant permissions to the groups imported from AD and then assign the users to those groups again in SD7, or just stick with the out-of-the-box groups and assign users to those. There doesn't seem to be a way to use AD to drive security, instead you have to do it all from in the app, which I find to be a bit annoying).
I'm not sure if that came across clearly or not, but what I'm trying to say is that I wish you could go into SD7 and tell it that for any given role, it should use a specified AD group, then when user X logs in, SD7 checks user X's AD group memberships and grants them the appropriate role in SD7. To me, this would be a way cleaner way to administer security in SD7 for AD-integrated environments.
-- After all of the above tweaking and cursing Symantec was done, I still wasn't actually able to use the product, as I kept receiving errors when trying to create incidents (I'm still looking into this one).
Now, I don't mean to talk down about this product (heck, I love what they've done with NS7 and I think SD7 has a ton of potential and some amazing features), and it's quite possible that these issues are due to me not configuring things properly, but all-in-all, it's been an extremely frustrating and time-consuming experience just to try and test/evaluate this product.