Skip to main content

Notifications

Announcements

No record found.

Microsoft Dynamics CRM forum
Suggested answer

CRM Services account rights

Posted on by 5

Hello team.

I've an dynamics crm on-premises and i'm using the services accounts under domain admin group in active directory.
Today the security team was asking why these account are under the domain admin group.

There's an official document referring to service accounts rights and if this accounts should be in these group or can be remove from domain admin group?

I don't remember why i added these accounts in domain admin.

It's a productive environment.

Thanks a lot.

  • Suggested answer
    PerezAguiar Profile Picture
    PerezAguiar on at
    RE: CRM Services account rights

    Hey Jonathan.

    Most of the information can be checked on https://learn.microsoft.com/en-us/dynamics365/customerengagement/on-premises/deploy/security-considerations-for-microsoft-dynamics-365?view=op-9-1.  Not sure why on your particular scenario they were added to "Domain admins", as the recommendation is always "least privilege".  Installation does require that the users are added as local administrators on the machines where you're installing.  However, these points are interesting:

    • Managed service accounts (group-managed service accounts (gMSA) or single-managed service accounts) and virtual accounts (NT SERVICE\,<SERVICENAME>) aren't supported for running Dynamics 365 for Customer Engagement services.
    • Have organizational unit and security group creation and add membership permission to those groups in Active Directory. Alternatively, you can use a Setup XML configuration file to install Dynamics 365 Server when security groups have already been created.

    Best regards

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Anton Venter – Community Spotlight

Kudos to our October Community Star of the month!

Announcing Our 2024 Season 2 Super Users!

A new season of Super Users has arrived, and we are so grateful for the daily…

Dynamics 365 Community Newsletter - September 2024

Check out the latest community news

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 290,564 Super User 2024 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 228,651 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,148

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans