Prepare NAV Server Environment

To keep the production server secure two Windows user should be created. This is necessary to limit the rights of the users and thus to enhance the production server security.

Microsoft Dynamics NAV Server account

When you install Microsoft Dynamics NAV Server, you must identify the active directory account to provide credentials for the server. By default, Microsoft Dynamics NAV Server runs under the Network Service account. It is recommended to create a domain user account to run Microsoft Dynamics NAV Server. This account should not be an administrator either in the domain or on any local computer. A dedicated domain user account is considered more secure because no other services and therefore no other users have permissions for this account.

From now on, in this installation guide, we will use a domain user account to run Microsoft Dynamics NAV Server and as an example we will use 'SC_Navuser' name for this user.

Configure the rights for the SC_Navuser (a user under whom Microsoft Dynamics NAV Server is running):

Step 1: Open SQL Server Management Studio.

Step 2: Click on 'Security > Logins' and create new login for the SC_Navuser.

Step 3: On the 'User Mapping' page map SC_Navuser to the Microsoft Dynamics NAV database and in the 'Default Schema' field set the '$ndo$navlistener' value.

For more information about Object Change Listener, see 'Enabling the Object Change Listener' in the MSDN Library.

Setting Default Schema for SC_Navuser

Step 4: Expand the Microsoft Dynamics NAV database > Security > Roles > Database Roles and open the properties of the 'public' role. Make sure that the 'Select' permissions are granted for the 'Object Tracking' table:

Grant 'Select' Permissions for the 'Object Tracking' Table

Configure Microsoft Dynamics NAV services to run under SC_Navuser:

Step 1: Open Microsoft Windows Services console.

Step 2: Select 'Microsoft Dynamics NAV Server' service and open its properties.

Step 3: Under the 'General' tab select 'Automatic' startup type.

Step 4: Under the 'Log On' tab, select 'This account' option and specify the SC_Navuser.

Step 5: Select 'Microsoft Dynamics NAV Business Web Services' service and open its properties.

Step 6: Under the 'General' tab select 'Automatic' startup type.

Step 7: Under the 'Log On' tab, select 'This account' option and specify the SC_Navuser.

Both services should be started under the same domain user account 'SC_Navuser'.

After finishing the configuration restart the services.