Hi All,
I've discovered an issue with the use of AD Security Groups within AX 2012 R2 (CU9).
Our customer is currently using active directory groups in AX to allow access to it's users.
Because we need a more refined way to define security, we no longer use the ad groups.
So I set the 'enabled' on all these groups to 'false'. Amazingly enough this has no effect at all.
Just to be sure I tried this in a vanilla environment.
Added an AD Group 'Domain Users' and assigned the role 'System Administrator".
Then disabled the AD Group in AX, so you would expect that nobody can access AX except me.
Well, this isn't the case. Any domain user that logs on to the vanilla box has 'System Admin' rights even with the AD group disabled.
So I'm wondering, is this a know issue or am I doing something wrong here?
Couldn't find anything on the net about this ...
Regards,
Sven Peeters