Open Forum

Like what you see? Discover the benefits of the GPUG Community. Learn More

Windows vs SQL Server Login

  • 1.  Windows vs SQL Server Login

    Posted 06-11-2018 10:49 AM
    Is it necessary to have a SQL Server login for GP users or can a Windows Login work for all users?

    ------------------------------
    Grant Merker
    YMCA of Metro Chicago
    Chicago IL
    ------------------------------


  • 2.  RE: Windows vs SQL Server Login

    Posted 06-11-2018 11:43 AM
    Grant,

    Dynamics GP can only use SQL Authentication to connect to the SQL databases.

    There are a couple places where Windows Authentication can come into play.

    1) If you're using the GP Web Client and you've setup Identity Management you can assign a Windows or Organizational Account to your GP user accounts, so when you log into the Web Client you're taken past the typical GP login window.  Behind the scenes Dynamics GP is still using a single proxy account for everyone to communicate to SQL though.

    2) From the Desktop client perspective there is an option in the System Preferences window (found under Tools > Setup > System) where you can allow users to remember their users.  This associates a user's GP account with the Windows account they are logged into the machine as and is saved in a local user registry key.  So, when someone opts to remember their GP user and they launch GP it should take them right past the login window.  This isn't technically using Windows credentials to sign into Dynamics GP, but it does mimic a single-sign on experience.

    There are some ISV products out there that also provide more integration with Windows Authentication, but I can let them speak up since I don't have any experience with them.

    ------------------------------
    Lucas Miller
    Support Escalation Engineer
    Microsoft
    Fargo, ND
    ------------------------------



  • 3.  RE: Windows vs SQL Server Login

    TOP CONTRIBUTOR
    Posted 06-11-2018 01:46 PM
    Hi @Grant Merker

    I​n addition to what @Lucas Miller has provided, I'd like to add that many of the ISV products DO require the users' AD logins be given at least read permissions on the databases.

    Other GP related add-ons or ISV's that require at least Read  permissions are:  SSRS Reports, Refreshable Excel Reports (depending on how they are built), Jet Reports and some Power BI reporting - again, depending on how they were built, and several other add-ons and ISVs.

    Many companies choose to setup an AD Group for GP users to make setting these permissions a less daunting task.


    ------------------------------
    Kindest Regards,

    Jo deRuiter
    "That GP Red Head"
    Advanced Credentialed Professional-Dynamics GP
    Member, GPUG GP Credentialing Exam Committee
    Chairman, GPUG Partner Advisory Board
    "......what isn't she up to?"
    Heartland Business Systems, LLC
    Senior Financial Systems Consultant
    Milwaukee, WI
    770-906-4504 (Cell)
    ------------------------------



  • 4.  RE: Windows vs SQL Server Login

    SILVER CONTRIBUTOR
    Posted 06-11-2018 01:55 PM
    ​Grant,

    I was researching your same issue and seems that FASTPATH Config AD resolves or alleviate a little bit of your worries.

    ------------------------------
    Anthony Pearson
    Application Systems Administrator
    WellDyneRx Inc
    Tampa FL
    ------------------------------