How To Install The Microsoft Dynamics GP 2013 (Beta) Web Client – Security Groups & Required Service Accounts

There are two security groups needed for the Microsoft Dynamics GP 2013 web client and these should be created prior to starting the web client installation.

The first is the Web Client Users group, of which users who will log into the web client will need to be members. The second is the Web Management Console Users group which is the group for administrators of the Web Client.

I have created these groups in Active Directory as GPWebClientUsers and WebManagementConsoleUsers respectively.

To run Microsoft Dynamics GP Web Services, there are four service accounts which are required:

  1. GP Web Client site application pool – This is the service account which runs the application pool on the web site hosting the Microsoft Dynamics GP web client.
  2. Web Management Console application pool – This is the service account which runs the application pool on the web site hosting the Web Management Console.
  3. Session Central Service – This si the service account which runs the Session Central Service.
  4. Session Service – This is the service account which runs the Session Service on each session host machine.

For the single-server installation these accounts can be machine accounts but I would always recommend that even for this type of installation that they be limited privilege Domain user accounts which have a password that does not expire.

For a scale out, or multi-tenant configuration, these would need to be privilege limited Domain user accounts with passwords that do not expire. While these can all be the same accounts, I typically advise people to use a different account for each one (a legacy of dealing with Microsoft Dynamics CRM where it is recommended that each service is a different account).

In this single-server configuration I will be configuring four separate user accounts to use; one for each of the services.

In the next post, I’ll take a look at installing Internet Information Services (IIS).

Ian Grieve

About Ian Grieve

Ian is a Microsoft Dynamics GP certified consultant specialising in the delivery of Microsoft Dynamics GP projects and currently working for Perfect Image Ltd., a Microsoft Partner and VAR in the North East of England. Ian has worked with Microsoft Dynamics GP since 2003 and, over the nine years since, has dealt with all aspects of the product life-cycle from presales, to implementation, to technical and functional training, to post go-live support and subsequent upgrades and process reviews. In his spare time, Ian runs the azurecurve | Ramblings of a Dynamics GP Consultant blog dedicated to Microsoft Dynamics GP and related products.
This entry was posted in Dynamics, GP, Microsoft, Web Client and tagged , , , , , , , . Bookmark the permalink.

4 comments on “How To Install The Microsoft Dynamics GP 2013 (Beta) Web Client – Security Groups & Required Service Accounts

  1. Pingback: How To Install The Microsoft Dynamics GP 2013 (Beta) Web Client – Security Groups & Required Service Accounts : Interesting Findings & Knowledge Sharing

  2. Pingback: How To Install The Microsoft Dynamics GP 2013 (Beta) Web Client – Security Groups & Required Service Accounts | azurecurve - DynamicAccounting.net - GP Technical Blogs - Microsoft Dynamics Community

  3. Pingback: How To Install The Microsoft Dynamics GP 2013 (Beta) Web Client – Security Groups & Required Service Accounts | azurecurve – 9/21, DynamicAccounting.net | Partner Compete

  4. Pingback: GP 2013 Web Client : Microsoft Dynamics GP Discussion

Leave a Reply

Your email address will not be published. Required fields are marked *

*

* Copy This Password *

* Type Or Paste Password Here *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>