0 votes

We originally installed Adaxes and assigned the Adaxes Service user to the Domain Admins group. We are now locking down that group and have removed the Adaxes Serivce from that group, and we're starting to get messages where users don't have rights to do things. What rights does Adaxes Service need in order to administer users?

by (20 points)

1 Answer

0 votes
by (211k points)

Hello,

The Adaxes service account only needs the permissions to publish the service in Active Directory. For information on how to grant the permissions, have a look at section How do I grant permissions to publish Adaxes service of our installation guide: https://www.adaxes.com/help/InstallationGuide/#how-do-i.

At the same time, all operations in a managed domain are performed with the credentials of the domain service account. It is recommended to use an account different from the Adaxes service one. For information on how to check/change the account, see https://www.adaxes.com/help/ChangeManagedDomainServiceAccount. The account must have all the necessary native AD permissions to perform the operations you need. It is recommended that the account is a member of the BUILTIN/Administrators group.

Related questions

0 votes
1 answer

I have been searching your site, but could not find a list of access rights needed. --- Morten A. Steien

asked Feb 23 by Morten A. Steien (150 points)
0 votes
0 answers

We have delegated updating user properties in AD and the usrs have requested those changes updated in the GAL. Is ther ea way to do this in Adaxes?

asked Feb 13, 2020 by Derek.Axe (420 points)
0 votes
1 answer

I'm looking for installation/configuration manuals to determine the installation requirements (prerequisites) for Adaxes. I'd like to install this on two vmware virtual servers running Windows ... ready for the install so I don't waste any of the trial time.

asked Apr 27 by MRBruce (90 points)
0 votes
1 answer

Can I manage the user that is user by Adaxes to connect to Active Directory with Privilege Access Management (PAM)? Since this user can change user's password, ... would like to manage this user so that PAM can change/rotate the password periodically

asked Nov 18 by fachmi (70 points)
0 votes
1 answer

I need to know what are the latest improvements in Adaxes to work with Cloud automation? Is there any more planned improvements for the Cloud base automations?

asked Apr 20, 2020 by kanishka.silva (20 points)
2,608 questions
2,346 answers
6,232 comments
864,325 users