The Forums on slxdeveloper.com are now retired. The forum archive will remain available for the time being. Thank you for your participation on slxdeveloper.com!
|
|
Running the Sync Server without Admin ID
Posted: 25 Mar 08 10:22 AM
|
I'm wondering if there is any way to create a user that will have all the administrative roles assigned to it so it can run the sync server. Is there a way to make this work? Might there be issues with account access?
Any advice would be appreciated. |
|
|
|
Re: Running the Sync Server without Admin ID
Posted: 25 Mar 08 5:12 PM
|
Ask your Risk Management people if you can just rename the admin user (maybe to a username of a former employee or something like that). It doesn't look like you can do this in the Administrator Ap, but you can try it in the execute SQL feature to test it. Let us know if it works.
Assigning all the Administrative rights to a different user doesn't make you more secure because a hacker could just hack the user profiles who are doing these functions. Renaming the Admin user in network domain is a common way to make it more difficult for outsiders to obtain administrative access. |
|
|
| |
|
Re: Running the Sync Server without Admin ID
Posted: 27 Mar 08 2:02 PM
|
IIRC I don't think you can change the admin name. There's things that are hardcoded to use it I believe. It sounds like he just wants another user so that he can run the sync server via the command line. I wasn't aware that had to actually be the admin user but I probably was smart enough to expose the password in my 3rd party scheduler.
The sync service does sound like the best bet though. I ran to it ASAP because I got tired of always having to login to my server just to kick off the sync. Heaven forbid I forget to lock it one day. That's a way bigger security risk than getting just the saleslogix admin because I always used the domain administrator account.
Having said that, isn't it possible to use Windows Auth to tie an Admin user to someone in the Domain? If your 3rd party scheduler logged in as them they should be able to login without credentials. It creates it's own security risk but you'll always have to give up something to achieve your goal. |
|
|
|
Re: Running the Sync Server without Admin ID
Posted: 27 Mar 08 6:07 PM
|
Just to clarify the issue that Ian and I looking into... We already are using the SLXService ID to run hourly automatic syncs. However we are looking to assign another SalesLogix User ID the ablility to run Manual syncs so that we don't have to use the SalesLogix Admin account. Currently if you try to use any other SalesLogix User ID to run the Sync Server it will tel you that only the Admin can run this.
Is it possible to get another SalesLogix user ID to work or to write a vbs script to use the SLXService ID to do an on demand (manual) sync?
Thanks! |
|
|
|