Great Plains 9 - Changing All Logins 2

[JohnBates]

hi all,

We use GP 9 Microsoft Dynamics on SQL Server 2000 database.

All the users are local (not Domain)

We are required, by the auditor, to switch all users over to their domain login.

So jbates will become CORPORATE\jbates

I can handle the SQL Server part of this.

**But I'm wondering if GP has the user/login embedded in any GP tables that may have to also be changed? ** Does anyone know?

Thanks, John

 

[winthropdc]

Microsoft Dynamics GP does not support using of the windows login. You must still use a SQL Server login with SQL Server using mixed mode authentication.

So are you trying to use Windows logins, or just change the SQL User ID to include the Domain?

The User ID appears in a number of setup tables for access, permissions and security. You would have to change all of this tables as well as SQL. It would probably be easier to just create new users in GP.

David Musgrave [MSFT]
Senior Development Consultant
Escalation Engineer - Great Plains
Microsoft Dynamics Support - Asia Pacific

Microsoft Dynamics (formerly Microsoft Business Solutions)

http://www.microsoft.com/Dynamics

Any views contained within are my personal views and
not necessarily Microsoft Business Solutions policy.
This posting is provided "AS IS" with no warranties,
and confers no rights.

 

[JohnBates]

Thank you Winthropdc.

Ouch! We didn't know GP was restricted to using local logins. We wanted to use the regular Windows domain logins to get the 90-day password expiration and the password policy enforcement.

Obviously the auditor (and I also) are not very familiar with Great Plains.

I will digest your advice and may post back with some more questions.

Thanks, John

 

[jazgeek]

JohnBates,

omni tools has a password change enforcement tool if you need to comply with some auditor's idea of fun.



-----------
and they wonder why they call it Great Pains!

jaz

 

[JohnBates]

Thanks jazgeek.

This system GP is planned to be replaced in 6 months so I don't feel that buying Omni is worth all the hassle.

If we had GP installed on SQL Server 2005, those GP users can be changed to enforce the security policy, but SS 2000 does not have that option. That's what the GP 9 documentation/Help says.

I'm thinking the auditor is just out of luck

John

 

[JohnBates]

... I have a followup question for winthropdc.

??Are the Dynamics GP user *passwords* embedded in the GP tables?

If they are not, I could change each SQL Server logins password, then inform the user of their new password.
Seems like a lot of effort but it may be the only way I can make the auditor happy

Thanks, John

 

[winthropdc]

There is an encrypted password field on the SY_Users_MSTR (SY01400) table. However, it is not used for SQL based systems.

The only issue I have is that it you change the password at the SQL Enterprise Manager level, Microsoft Dynamics GP 9.0 or later will request the user to change their password on login.

The reason is that GP uses encrypted passwords and v9.0 onwards no longer allows an un-encrypted password to be used.

The advantage of the encrypted passwords is that they can only be used with GP. A user cannot use another application to access the data as the password they will try will not work. This means that you cannot bypass the application level security provided inside GP.

If you want password expiry, your best approach without using SQL Server 2005 is to look at 3rd party products like the Omni Password tool I originally developed. You can get it as part of the Omni Tools suite from

http://www.rocktonsoftware.com.

David Musgrave [MSFT]
Senior Development Consultant
Escalation Engineer - Great Plains
Microsoft Dynamics Support - Asia Pacific

Microsoft Dynamics (formerly Microsoft Business Solutions)

http://www.microsoft.com/Dynamics

Any views contained within are my personal views and
not necessarily Microsoft Business Solutions policy.
This posting is provided "AS IS" with no warranties,
and confers no rights.

 

[JohnBates]

winthropdc:

"The only issue I have is that it you change the password at the SQL Enterprise Manager level, Microsoft Dynamics GP 9.0 or later will request the user to change their password on login."

**Would the user have to change their password *every* time they logged on after I change the SQL Server password or only the first time ? (that's what I would expect) **

We only have to get thru the next 6 months, then we convert to Lawson.

Please clarify after which time I promise to leave you alone Thanks for your replies. John

 

[winthropdc]

Hi John

After the password has been changed once by the user and is now an encrypted password GP will not ask again.

Note that when the password is saved and encrypted, the User ID will become case sensitive. So make sure that the User ID is entered how you would like it always entered when they do the initial password setting.

Can we persuade you to stay with GP?

David Musgrave [MSFT]
Senior Development Consultant
Escalation Engineer - Great Plains
Microsoft Dynamics Support - Asia Pacific

Microsoft Dynamics (formerly Microsoft Business Solutions)

http://www.microsoft.com/Dynamics

Any views contained within are my personal views and
not necessarily Microsoft Business Solutions policy.
This posting is provided "AS IS" with no warranties,
and confers no rights.

 

[JohnBates]

Yes winthropdc, I setup a fake user yesterday, changed the password and the results were just as you described.

jazgeek - The Omni Tool tool-is that sold by MS? Do you know the cost?

I may try to convince the auditor that it's not worth all the trouble....

Thanks to both of you. John

 

[jazgeek]

omni tools is sold by rockton software. do a google search because the forum won't allow us to put in a web address.

it wasn't tooooo expensive last time I purchased it in 2000.



-----------
and they wonder why they call it Great Pains!

jaz

 

[winthropdc]

Omni Tools was originally developed by me when I owned Winthrop Dexterity Consultants. Winthrop has since sold it to

http://www.rocktonsoftware.com.

Omni Password is one of the Omni Tools modules.


David Musgrave [MSFT]
Senior Development Consultant
Escalation Engineer - Great Plains
Microsoft Dynamics Support - Asia Pacific

Microsoft Dynamics (formerly Microsoft Business Solutions)

http://www.microsoft.com/Dynamics

mailtoavid.Musgrave@online.microsoft.com

Any views contained within are my personal views and
not necessarily Microsoft Business Solutions policy.
This posting is provided "AS IS" with no warranties,
and confers no rights.