locked
Should the CRM service accounts really be the members of the Domain Users group? RRS feed

  • Question

  • Hi all,

    Our company plans to deploy a MS CRM 2011 based XRM solution for a customer with specific security policy.

    The customer insists on his statement, that user accounts used for Microsoft Dynamics CRM services (Sandbox Processing Service, Async Processing Service, Deployment Web Service, Application Service) and also Reporting Service should not be members of the Domain Users group.

    Is there any way how to solve this requirement and therefore not to fulfill exactly the Implementation Guide principles given here

    http://msdn.microsoft.com/en-us/library/hh699825.aspx?

    Thank you for any help or a hint.


    Jan Vanek http://www.crm-quick-quote.com

    Tuesday, August 20, 2013 3:16 PM