0 votes

We originally installed Adaxes and assigned the Adaxes Service user to the Domain Admins group. We are now locking down that group and have removed the Adaxes Serivce from that group, and we're starting to get messages where users don't have rights to do things. What rights does Adaxes Service need in order to administer users?

by (20 points)

1 Answer

0 votes
by (227k points)

Hello,

The Adaxes service account only needs the permissions to publish the service in Active Directory. For information on how to grant the permissions, have a look at section How do I grant permissions to publish Adaxes service of our installation guide: https://www.adaxes.com/help/InstallationGuide/#how-do-i.

At the same time, all operations in a managed domain are performed with the credentials of the domain service account. It is recommended to use an account different from the Adaxes service one. For information on how to check/change the account, see https://www.adaxes.com/help/ChangeManagedDomainServiceAccount. The account must have all the necessary native AD permissions to perform the operations you need. It is recommended that the account is a member of the BUILTIN/Administrators group.

Related questions

0 votes
1 answer

I have been searching your site, but could not find a list of access rights needed. --- Morten A. Steien

asked Feb 23, 2021 by Morten A. Steien (150 points)
0 votes
1 answer

I am working with Adaxes for the first time. Looking to set up the service account so it can actually make changes to AD not just to register the Adaxes Service. I would rather ... the Adaxes service. What I am unable to do is have adaxes make changes to AD.

asked Sep 21 by mightycabal (20 points)
0 votes
0 answers

We have delegated updating user properties in AD and the usrs have requested those changes updated in the GAL. Is ther ea way to do this in Adaxes?

asked Feb 13, 2020 by Derek.Axe (440 points)
0 votes
1 answer

Other than potentially infinite loops and scripts querying large number or resources, what are the downsides? We have a custom command that boots up a vm during execution, ... want to make sure there is nother else to consider before increasing the timeout.

asked Mar 10 by ThompsonAlex (20 points)
0 votes
1 answer

I'm looking for installation/configuration manuals to determine the installation requirements (prerequisites) for Adaxes. I'd like to install this on two vmware virtual servers running Windows ... ready for the install so I don't waste any of the trial time.

asked Apr 27, 2021 by MRBruce (110 points)
2,803 questions
2,535 answers
6,605 comments
62,551 users