Adaxes

service account still using domain admin

0 votes

I upgraded to the latest Adaxes version about a month ago. Previously, I had my Domain Admin account as the service user, for the Softerra Adaxes service, and knew I wanted to change that to a different account.

So I did a full uninstall and installed the new version, then specified a different account for the service. Everything seemed to work correctly, however, my network guys are seeing my Domain Admin account still doing the work. I confirmed this, by disabling my Domain Admin account and restarting the Adaxes service, and nothing was working.

Even though my Service account is under The Softerra Adaxes Service, it's still running under my Domain Admin after re-install.

It's on a Windows 2012 R2 x64 application server, not domain controller. I was under my Domain Admin during installation, but specified the different service account to run the Softerra Adaxes Service with.

by (1.4k points)

1 Answer

0 votes
by (288k points)

Hello,

All operations in a managed domain are performed using the credentials that were specified during the domain registration in Adaxes. It is not necessarily the Adaxes service account (specified during Adaxes installation). For information on how to check/change the account, have a look at the following help article: https://www.adaxes.com/help/?HowDoI.ManageActiveDirectory.ManageDomains.ChangeManagedDomainLogonInfo.html.

Related questions

0 votes
1 answer
How can we minimize permissions of Domain Service Account and still retain Adaxes functionality?

Hello, We have recently begun setting up Adaxes and are trying to exercise least privilege on both of the accounts we have created to manage the service. ... account is also given the appropriate Security Role within the Adaxes administrative console.

asked Sep 12, 2023 by just.kon (20 points)
0 votes
1 answer
Service Account not Domain Admin

Hi, is there any guide what to do if the service account is not a domain admin? Especially what rights does the account need for the Exchange connection? The event log is ... LDAP (Permission denied). And what is need for the Exchange servers (WinRM?). Thanks!

asked Sep 11, 2018 by ahanil (200 points)
0 votes
1 answer
Adaxes Connected to my Domain Admin Account

So not sure how it happened but the Adaxes web interface is connected to my domain admin account. When I tried to change it everything went down. Were are all the locations this password is store on the server? Thanks

asked Jan 20, 2015 by 7efd721c8b (420 points)
0 votes
1 answer
PowerShell Script executed as Service account - not domain account

Hi team, we have two accounts for Adaxes in our AD Service account (running services) named "service-adaxes" Service Domain account (to connect to AD) named "service-adaxesdomain" ... script? Or do I need to grant permissions to "service-adaxes" to manage AD?

asked Jul 30 by wintec01 (1.5k points)
0 votes
1 answer
Is there a way to force users to change their password, but still allow them to log in to Self-Service to change it?

I know I can set the "User must change password at next logon" flag, but noticed when I do that, they can no longer log in to Self-Service.

asked Oct 1, 2020 by RickWaukCo (320 points)
3,538 questions
3,229 answers
8,224 comments
547,747 users