Skip to main content

Notifications

Customer experience | Sales, Customer Insights,...
Suggested answer

CRM Services account rights

(0) ShareShare
ReportReport
Posted on by 5

Hello team.

I've an dynamics crm on-premises and i'm using the services accounts under domain admin group in active directory.
Today the security team was asking why these account are under the domain admin group.

There's an official document referring to service accounts rights and if this accounts should be in these group or can be remove from domain admin group?

I don't remember why i added these accounts in domain admin.

It's a productive environment.

Thanks a lot.

  • Suggested answer
    PerezAguiar Profile Picture
    PerezAguiar on at
    RE: CRM Services account rights

    Hey Jonathan.

    Most of the information can be checked on https://learn.microsoft.com/en-us/dynamics365/customerengagement/on-premises/deploy/security-considerations-for-microsoft-dynamics-365?view=op-9-1.  Not sure why on your particular scenario they were added to "Domain admins", as the recommendation is always "least privilege".  Installation does require that the users are added as local administrators on the machines where you're installing.  However, these points are interesting:

    • Managed service accounts (group-managed service accounts (gMSA) or single-managed service accounts) and virtual accounts (NT SERVICE\,<SERVICENAME>) aren't supported for running Dynamics 365 for Customer Engagement services.
    • Have organizational unit and security group creation and add membership permission to those groups in Active Directory. Alternatively, you can use a Setup XML configuration file to install Dynamics 365 Server when security groups have already been created.

    Best regards

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

News and Announcements

Announcing Category Subscriptions!

Quick Links

December Spotlight Star - Muhammad Affan

Congratulations to a top community star!

Top 10 leaders for November!

Congratulations to our November super stars!

Tips for Writing Effective Verified Answers

Best practices for providing successful forum answers ✍️

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 291,359 Super User 2024 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 230,370 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans