Least privileges for the service account used in ADManager Plus
Note: It is recommended to use a member of the domain admin group as the service account under the Domain Settings.
However, if you would like to give granular permissions for the service account, please follow this document.
​
New to ADSelfService Plus?
Related Articles
How to configure high availability (HA) in ADManager Plus
Objective: To configure high availability (HA) in ADManager Plus Solution: High Availability: How it works? To ensure continuous availability of ADManager Plus in the event of a downtime, have a secondary ADManager Plus instance installed on another ...Permissions required for the backup add-on in ADManager Plus
While enabling the backup add-on, it is recommended that you provide Domain Admin privileges to the service account used to configure the AD domains in ManageEngine ADManager Plus. However, if your organization’s policy restricts the use of the ...Why aren't AD objects showing up after adding a domain in ADManager Plus?
Issue description After adding a new domain in ADManager Plus, you may find that directory objects such as users, groups, computers, or OUs are not being retrieved. Although the domain appears in the configured list, no data is displayed for ...Using a Managed Service Account (MSA or gMSA) in ADManager Plus
A Managed Service Account (MSA) or group Manage Service Account (gMSA) is a more secure and scalable service account with the characteristics of a computer object. The passwords of MSAs/gMSAs are random and are automatically updated by the Windows ...How to run ADManager Plus as a Service?
To run ADManager Plus as a service, perform the following steps after downloading and installing ADManager Plus. Click Start > ADManager Plus > Install ADMP Service. When ADManager Plus is installed as a service, it runs with the privileges of the ...