locked
Changing the CRM Administrator User account RRS feed

  • Question

  • Our setup is:
    1 x CRM 4.0 Server
    1 x SQL 2008 Server/SSRS 2008

    When we installed both CRM and SQL, we used the Network Administrator account.
    The Network Adminstrator account is also the Administrator in CRM and it's mailbox is the default address for all workflows as well.

    This is not a good idea security-wise, so we want to change this.  I'm pretty sure this is going to have repercussions throughout the system!


    So if we create another AD account, eg 'CRM Administrator' to replace the Network Administrator account, what Settings would we need to change in CRM and SQL Servers?
    Is it even possible to replace the AD account associated with System Administrator in CRM?
    What else would we need to check for?

    Many thanks for any help!



    Thursday, June 10, 2010 11:43 AM

Answers

  • You can link the existing CRM administrator account to the new AD account by opening the CRM user record and overtyping the existing AD user name with the new AD user name. The old AD user account will no longer have access to the CRM application.

    There should be no need to change anything in the SQL Server database.

    Did you use the Network Administrator account for any of the CRM or SQL services?

    And contrary to the reply by ibbz101, there it is not necessary for the CRM administrator account to be a domain admin account.

     

    • Marked as answer by Jim Glass Jr Monday, June 21, 2010 2:43 PM
    Friday, June 18, 2010 2:08 PM
    Moderator

All replies

  • Hi,

    This is simple, add the new CRM administrator account to CRM - give him full priviliges then open deployment manager on the server and add the new account as a deployment administrator.

    The CRM administrator account should be a domain admin account.


    http://mscrmblog.net
    Microsoft Certified Business Management Solutions Specialist
    Microsoft Certified CRM Developer
    Friday, June 18, 2010 1:52 AM
  • You can link the existing CRM administrator account to the new AD account by opening the CRM user record and overtyping the existing AD user name with the new AD user name. The old AD user account will no longer have access to the CRM application.

    There should be no need to change anything in the SQL Server database.

    Did you use the Network Administrator account for any of the CRM or SQL services?

    And contrary to the reply by ibbz101, there it is not necessary for the CRM administrator account to be a domain admin account.

     

    • Marked as answer by Jim Glass Jr Monday, June 21, 2010 2:43 PM
    Friday, June 18, 2010 2:08 PM
    Moderator
  • Thanks.

    I am pretty certain we are using the Network Administrator Account for all services where a domain name was required during the install.

    ff so, what additional changes would be required?

    Thank you for your help!

    Sen

    Friday, June 25, 2010 9:18 AM
  • By network administrator do you mean Domain Admin or Network Service?

     

     

    Friday, June 25, 2010 1:41 PM
    Moderator
  • Apologies for the delay in responding!

    By Network Admin I mean the Domain Administrator.

    Thanks

    Thursday, July 1, 2010 9:14 AM
  • Sorry for my delay in replying.

    On my CRM system and ones that I install, I use Network Service for the Microsoft CRM Asynchronous Processing Service.

    For SQL Server I create an AD account specially for SQL Server and use that.

    Wednesday, July 7, 2010 8:32 AM
    Moderator