Adaxes

service account still using domain admin

0 votes

I upgraded to the latest Adaxes version about a month ago. Previously, I had my Domain Admin account as the service user, for the Softerra Adaxes service, and knew I wanted to change that to a different account.

So I did a full uninstall and installed the new version, then specified a different account for the service. Everything seemed to work correctly, however, my network guys are seeing my Domain Admin account still doing the work. I confirmed this, by disabling my Domain Admin account and restarting the Adaxes service, and nothing was working.

Even though my Service account is under The Softerra Adaxes Service, it's still running under my Domain Admin after re-install.

It's on a Windows 2012 R2 x64 application server, not domain controller. I was under my Domain Admin during installation, but specified the different service account to run the Softerra Adaxes Service with.

by (1.4k points)

1 Answer

0 votes
by (272k points)

Hello,

All operations in a managed domain are performed using the credentials that were specified during the domain registration in Adaxes. It is not necessarily the Adaxes service account (specified during Adaxes installation). For information on how to check/change the account, have a look at the following help article: https://www.adaxes.com/help/?HowDoI.ManageActiveDirectory.ManageDomains.ChangeManagedDomainLogonInfo.html.

Related questions

0 votes
1 answer
How can we minimize permissions of Domain Service Account and still retain Adaxes functionality?

Hello, We have recently begun setting up Adaxes and are trying to exercise least privilege on both of the accounts we have created to manage the service. ... account is also given the appropriate Security Role within the Adaxes administrative console.

asked Sep 12, 2023 by just.kon (20 points)
0 votes
1 answer
Service Account not Domain Admin

Hi, is there any guide what to do if the service account is not a domain admin? Especially what rights does the account need for the Exchange connection? The event log is ... LDAP (Permission denied). And what is need for the Exchange servers (WinRM?). Thanks!

asked Sep 11, 2018 by ahanil (200 points)
0 votes
1 answer
Adaxes Connected to my Domain Admin Account

So not sure how it happened but the Adaxes web interface is connected to my domain admin account. When I tried to change it everything went down. Were are all the locations this password is store on the server? Thanks

asked Jan 20, 2015 by 7efd721c8b (420 points)
0 votes
1 answer
Is there a way to force users to change their password, but still allow them to log in to Self-Service to change it?

I know I can set the "User must change password at next logon" flag, but noticed when I do that, they can no longer log in to Self-Service.

asked Oct 1, 2020 by RickWaukCo (320 points)
0 votes
1 answer
Scheduled task failing to delete domain admin user objects

Hi We have a couple of scheduled tasks set up to remove accounts which have been disabled for a perios of time. This works fine for normal user accounts, but we ... and former domain admin accounts? We're running the latest version of Adaxes Thanks Matt

asked Oct 26, 2022 by chappers77 (2.0k points)
3,346 questions
3,047 answers
7,772 comments
544,972 users