locked
crm 2013 installation: 1 account per service account? RRS feed

  • Question

  • Hello,

    During the installation process of CRM 2013, you have to choose service accounts for running specific services.

    My question is simple: do I have to create an account into active directory for each service following minimal recommded rights for each of them?

    Thank you

    Thursday, February 27, 2014 10:44 AM

Answers

  • It is recommended to have separate service accounts for security purposes.  But if you are setting up a testing environment, you can simply use a single account.

    The account(s) will need to be created in AD before you can add them during the install.


    Jason Peterson

    • Marked as answer by sn1b Thursday, February 27, 2014 11:29 AM
    Thursday, February 27, 2014 11:14 AM

All replies

  • It is recommended to have separate service accounts for security purposes.  But if you are setting up a testing environment, you can simply use a single account.

    The account(s) will need to be created in AD before you can add them during the install.


    Jason Peterson

    • Marked as answer by sn1b Thursday, February 27, 2014 11:29 AM
    Thursday, February 27, 2014 11:14 AM
  • Hi,

    This is best practice so that each service account only has the minimum rights it needs so that the likelihood of exploits is reduced. It is not necessary for installation - but a best practice guidance so the choice is yours after you have done a risk assessment.

    See - http://technet.microsoft.com/en-us/library/hh699825

    and

    http://technet.microsoft.com/en-us/library/hh699761

    Hope this helps,

    Scott


    Scott Durow
    Blog www.develop1.net    Follow Me
    Rockstar365
    If this post answers your question, please click "Mark As Answer" on the post and "Mark as Helpful"

    Thursday, February 27, 2014 11:17 AM
    Answerer