Changing the ADMIN user

(0) Share

Report

Posted on by Community Member Microsoft Employee

Imagine a scenario where an installation of AX2009 has been performed with a common domain user account (external consultant). As this user now 'owns' the installation the admin user group cannot be removed from this user account and for good reasons. For independence purposes you want another domain user to own that account, and remove administrative access from the original user that installed the topology.

How is that possible? Have been contemplating to copy the original users SID to the new user, but foresee issues if the original user gets deleted in the domain. Is that an correct assumption?

Or is there something else that defines the ownership ?

Looking forward to replies :-)

*This post is locked for comments

All responses (5)

Answers (1)

Community Member Microsoft Employee on at

Like (0)

Report

RE: Changing the ADMIN user

thx
Community Member Microsoft Employee on at

Like (1)

Report

RE: Changing the ADMIN user

Thanks. please mark the thread as verified/resolved for other's benefit.
Verified answer

Community Member Microsoft Employee on at

Like (0)

Report

RE: Changing the ADMIN user

Hi All, many thanks for your replies. You are right about the service accounts, however, as there must always be at least one Admin user I solved it by doing the following:

1. open a new job and enter this:

static void pmaChangeAdmin(Args _args)

{

UserINfo userInfo;

;

ttsbegin;

// step 1

/* select forupdate userinfo

where userinfo.id == "Admin";

userinfo.id = "SomeNewId";*/

// step 2

/* select forupdate userinfo

where userinfo.id == "ServiceAccountId";

userinfo.id = "Admin";

userinfo.update();*/

ttscommit;

}

Run the job first with step 1, then with step 2 enabled.

2. Add the SomeNewId user to the Admin user group or any other for that matter :-)

3. Close AX and log in again. If the Service Account user is greeted as a new user, you have done it right.

4. In order to log on again as admin or service account, hold SHIFT and rigthclick the AX shortcut and log on as different user. Enter the credentials.

Solved :-) Thx for the tips...
Suggested answer

fsilva-jr 20 on at

Like (1)

Report

RE: Changing the ADMIN user

Hello Patrick!

I think that the following links will be usefull for you:

blogs.msdn.com/.../steps-to-restore-an-ax-database.aspx

support2.microsoft.com/.../925434

community.dynamics.com/.../move-dynamics-ax-database-to-different-domain-machine.aspx
Suggested answer

Community Member Microsoft Employee on at

Like (1)

Report

RE: Changing the ADMIN user

Hi Patrick,

In AX, the Admin account will have user as "Admin". this account cannot be removed. However, if you ever wanted to have new user as "Admin" account, then you can open the Users form, filter "Admin" id and change the network alias field to new id.

So AX admin account will be mapped to new Windows account. you would need not change SID, AX will automatically take care of it.

However, its always recommended to perform AX installation using Service account instead of user account. Service account never expires.

Changing the ADMIN user

Helpful resources

Quick Links

December Spotlight Star - Muhammad Affan

Top 10 leaders for November!

Tips for Writing Effective Suggested Answers

Leaderboard

Featured topics

Product updates

Changing the ADMIN user

Helpful resources

Quick Links

December Spotlight Star - Muhammad Affan

Top 10 leaders for November!

Tips for Writing Effective Suggested Answers

Subscribe to

Leaderboard

Featured topics

Product updates