Small and medium business | Business Central, N...

BC 26 Security Groups - Onprem

(6) Share

Report

Posted on by mncomputerguy

In BC26 onprem on the security groups page when you click New, then under Windows Group Name click the 3 dots to open the "Available Security Groups" page it only lists the default groups in AD. Is there anyone to list/search all onprem Active Directory groups or are we stuck manually typing these in when tying them into BC?

I've tested with two different versions of 26 (rtm, cu3) and same behavior. In the screenshot is the default groups it shows, there should be dozens of other security groups listed/available.

Categories:

Dynamics 365 Business Central

I have the same question (0)

All responses (4)

Answers (0)

Sort by

Suggested answer

Jeffrey Bulanadi 9,114 Super User 2026 Season 1 on at

Like (1)

Report
Copy link

Link copied!
Hi

It confirms that the “Available Security Groups” lookup in BC26 on-prem is only displaying default AD groups, such as “Backup Operators,” “Power Users,” and “Remote Desktop Users.” This behavior is consistent across multiple builds and is a known limitation when using Windows Authentication in on-prem deployments.

Here’s what’s happening and how to work around it:

1. Why only default groups appear

The lookup page pulls from a limited AD query scope, often restricted to well-known built-in groups

Custom or domain-specific groups aren’t surfaced unless explicitly queried or cached

2. Workaround options

You can manually type the Windows Group Name using the format DOMAIN\GroupName

To get a full list of AD groups, use PowerShell on the domain controller or a machine with RSAT tools:

powershell

Get-ADGroup -Filter * | Select-Object Name

Alternatively, use the Security Group Lookup page in BC and extend it via AL to include custom logic for broader AD enumeration (requires development)

3. AL-based workaround (developer tip)

The Security Group Buffer and Security Group Lookup pages use temporary tables

You can create a page extension or custom action that calls GetAvailableGroups() from the Security Group codeunit

For full access, you may need to reference domain-specific group names directly or use external integration

Here’s a helpful walkthrough on using codeunit Security Group and page Security Group Lookup.

https://yzhums.com/41766/

If you find this helpful, feel free to mark this as the suggested or verified answer.

Cheers
Jeffrey

Was this reply helpful? Yes No
Suggested answer

YUN ZHU 99,805 Super User 2026 Season 1 on at

Like (1)

Report
Copy link

Link copied!

Hi, I'm not sure if this can help you, I hope the information below can give you some hints.

https://learn.microsoft.com/en-us/answers/questions/920195/unable-to-see-all-the-ad-groups

Thanks.

ZHU

Was this reply helpful? Yes No
Gerardo Rentería Ga... 26,080 Most Valuable Professional on at

Like (2)

Report
Copy link

Link copied!

Hi, good day
I hope this can help you, and give you some hints.

Control Access Using Security Groups - Business Central | Microsoft Learn

Best Regards
Gerardo

Was this reply helpful? Yes No
Suggested answer

Jainam M. Kothari 15,829 Super User 2026 Season 1 on at

Like (1)

Report
Copy link

Link copied!

May this can help : https://learn.microsoft.com/en-us/dynamics365/business-central/ui-security-groups

Was this reply helpful? Yes No