Adaxes

Adaxes Service Account

0 votes

Hello

We are trying to Demo Adaxes version 2019.01. We created a read only service account but apparently the "account doesn't have enough privileges to register a service connection point". Do we need to grant Domain admin to this service account? Why?

Thanks

Dave

by (120 points)

1 Answer

0 votes
by (288k points)
selected by
Best answer

Hello Dave,

The Adaxes service account does not need to be a domain admin, it only requires the permissions to publish and unpublish Adaxes service. For information on how to grant the permissions, see https://www.adaxes.com/resources/releas ... ishservice.

Should the issue persist, please, specify whether you are installing Adaxes on a domain controller (DC) and what version of Windows is running on it.

Related questions

0 votes
1 answer
Least Privileged Permissions Adaxes service account

Dear Reader, Currently we have Adaxes installed to manage mostly the on-premises user base. However some activities are extended to Office 365. Here we notice that Adaxes installed ... and when we do so how will this affect Adaxes? Thanks in advance, Maarten

asked Jan 8 by Maarten5150 (20 points)
0 votes
1 answer
How can we minimize permissions of Domain Service Account and still retain Adaxes functionality?

Hello, We have recently begun setting up Adaxes and are trying to exercise least privilege on both of the accounts we have created to manage the service. ... account is also given the appropriate Security Role within the Adaxes administrative console.

asked Sep 12, 2023 by just.kon (20 points)
0 votes
1 answer
Adaxes Service Account

I changed a password on my Domain Admin account yesterday, I come in today and my HelpDesk is reporting the Adaxes interface is reporting an error, "The Username and or ... the MSI, and then remove the Adaxes Service Account, then go back and install it?

asked Jan 24, 2019 by rurbaniak (1.4k points)
0 votes
1 answer
Adaxes service account -> Managed Service Account?

Hello, with Server 2008R2 Microsoft introduced the managed service accounts. This is a very valuable feature since it reduces the risks in pass-the-hash attacks. Can the ... user be configured as a managed service account? Thank you for your help! HarryNew

asked Oct 22, 2018 by HarryNew (270 points)
0 votes
1 answer
PowerShell Script executed as Service account - not domain account

Hi team, we have two accounts for Adaxes in our AD Service account (running services) named "service-adaxes" Service Domain account (to connect to AD) named "service-adaxesdomain" ... script? Or do I need to grant permissions to "service-adaxes" to manage AD?

asked Jul 30 by wintec01 (1.5k points)
3,542 questions
3,233 answers
8,227 comments
547,808 users