Navision SQL - windows groups

lzr

I can add a windows login to the windows login table and it works.

I can add a windows login with no rights and then a windows group with rights that this user belongs to. This also works fine.

However if I add a windows group in Navision, then the user can not log in.

I read somewhere on forum that you have to add both, but in the installation & conf manual they says nothing about this.

Do I really have to add the user manually in Navision? Then I have no real use of my Navision windows groups.

kine

Yes, each user still need to be added into Navision.

The group can be used to assign roles (you do not need to copy roles from one user to another, you only add this user into the group and synchronize...)

lzr

Ok, damn.

Thanks for answer!

bbrown

When using Windows Authentication, yiou do not need to add both the Windows group and user to the Navision Windows Login table. You only need to add the group and assign roles to the group.

Do not confuse this with the G/L user setup table. This is where you need to add the individual users.

fb

...yiou do not need to add both the Windows group and user...

unless you are using v4.0 or greater with the SQL option....

Beginning in v4.0, the security synchronize process creates a 'per-user' app role (the all-powerful ndo$shadow app role must have been considered a security risk). To support this, the document titled "Late Changes in Security for v4.0" describes the new requirement that you must add each individual Windows Login to the Navision Windows Login table.

You do not need to associate any Navision roles with these individual logins, if you have (as in previous versions) assigned Navision roles to the various Windows Groups. However, the requirement to add the Logins remains.

[Edit] Described more fully here: http://www.mibuso.com/forum/viewtopic.p ... te+changes

lzr

That's what I read too. I use Navision 4.0 SP1.

Too bad it isn't possible anymore. It worked in Navision 4.0 SP1 native.

bbrown

unless you are using v4.0 or greater with the SQL option

Missed that. Spending too much time with older versions.