web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

Community site session details

Community site session details

Session Id :
Microsoft Dynamics NAV (Archived)

Which Windows Permissions for NAV Service Tier User Account

(0) ShareShare
ReportReport
Posted on by 652

Hi,

When installing NAV 2013 or 2015, I Always run the NAV services with a dedicated domain account. I use this procedure to set up the rights on domain and SQL Server level:

https://msdn.microsoft.com/nl-be/library/hh166150(v=nav.70).aspx

I also start the TCP IP port sharing service and I also create the dependencies between NAV Service and port sharing service.

But when I start the NAV service I Always get errors like below.

When I make the service account local admin it works, but I assume there must be a better way;-). Are there local machine permissions that need to be assigned?

 

Thanks,

Steven

Server instance: NAV-TEST

The service MicrosoftDynamicsNavServer$NAV-TEST failed to start. This could be caused by a configuration error. Detailed error information:System.ServiceModel.CommunicationException: The service endpoint failed to listen on the URI 'net.tcp://app.domain.local:7046/NAV-TEST/Service' because access was denied. Verify that the current user is granted access in the appropriate allowAccounts section of SMSvcHost.exe.config. ---> System.ComponentModel.Win32Exception: Access is denied   at System.ServiceModel.Activation.SharedMemory.Read(String name, String& content)   at System.ServiceModel.Channels.SharedConnectionListener.SharedListenerProxy.ReadEndpoint(String sharedMemoryName, String& listenerEndpoint)   --- End of inner exception stack trace ---   at System.ServiceModel.Channels.SharedConnectionListener.SharedListenerProxy.ReadEndpoint(String sharedMemoryName, String& listenerEndpoint)   at System.ServiceModel.Channels.SharedConnectionListener.SharedListenerProxy.HandleServiceStart(Boolean isReconnecting)   at System.ServiceModel.Channels.SharedConnectionListener.SharedListenerProxy.Open(Boolean isReconnecting)   at System.ServiceModel.Channels.SharedConnectionListener.StartListen(Boolean isReconnecting)   at System.ServiceModel.Channels.SharedTcpTransportManager.OnOpenInternal(Int32 queueId, Guid token)   at System.ServiceModel.Channels.SharedTcpTransportManager.OnOpen()   at System.ServiceModel.Channels.TransportManager.Open(TransportChannelListener channelListener)   at System.ServiceModel.Channels.TransportManagerContainer.Open(SelectTransportManagersCallback selectTransportManagerCallback)   at System.ServiceModel.Channels.TcpChannelListener`2.OnOpen(TimeSpan timeout)   at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)   at System.ServiceModel.Channels.ReliableChannelListenerBase`1.OnOpen(TimeSpan timeout)   at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)   at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)   at System.ServiceModel.Dispatcher.ChannelDispatcher.OnOpen(TimeSpan timeout)   at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)   at System.ServiceModel.ServiceHostBase.OnOpen(TimeSpan timeout)   at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)   at Microsoft.Dynamics.Nav.WindowsServices.NavServerWindowsService.StartWcfServices()   at Microsoft.Dynamics.Nav.WindowsServices.NavServerWindowsService.Start(String commandLineServiceInstanceName).

*This post is locked for comments

I have the same question (0)
  • Verified answer
    Community Member Profile Picture
    on at

    please have a look of below link. It will help you to resolve the issue.

    http://mibuso.com/forum/viewtopic.php?t=59700

     

  • Verified answer
    Tharanga Chandrasekara Profile Picture
    23,118 on at

    You need to provide local machine admin rights too.

  • Verified answer
    Suresh Kulla Profile Picture
    50,243 Super User 2025 Season 2 on at

    The NAV Service account should have local administrator rights if you want to run any components or the services. Recently we tried without local administrator and it worked in some scenarios, but when we ran into permission errors in other cases where it depends on components. We had some components mostly from add-on and i believe it would be the case for another standard Add-in's which required local administrator rights.

  • stevdeb Profile Picture
    652 on at

    Hi,

    Thanks for your reactions. If you all say it needs to have local admin rights, I assume that is the correct way. For the SQL server service account, it is advised to use the least amount of rights/permissions, but that seems not to be the case with NAV.

    Many Thanks,

    Regards,

    Steven

  • Gunnar Gestsson Profile Picture
    65 on at

    You don't need local admin rights.

    http://www.dynamics.is/?p=2291

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Leaderboard > 🔒一 Microsoft Dynamics NAV (Archived)

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans