Hello team.
I've an dynamics crm on-premises and i'm using the services accounts under domain admin group in active directory.
Today the security team was asking why these account are under the domain admin group.
There's an official document referring to service accounts rights and if this accounts should be in these group or can be remove from domain admin group?
I don't remember why i added these accounts in domain admin.
It's a productive environment.
Thanks a lot.