Configuration security (Client and Business Connector)

On a computer with the Microsoft Dynamics AX Configuration Utility installed, any user can view the settings for his or her own sessions.

On the computer running a client or running Business Connector with the Business Connector proxy user only a member of the local Windows Power User group or Administrators group can change configuration settings.

The following are recommended practices for using the Configuration Utility and configuration files securely.

• For clients, deploy the Configuration Utility only in development or test environments - in a production environment do not install it on client computers - instead, place a configuration file on a network shared folder, and use a shortcut to point to it. To install without the Microsoft Dynamics AX Configuration Utility you must perform a silent installation. For details, see "Mass deployment of the client" in the Microsoft Dynamics AX 2009 Implementation Guide.

• For non-administrator Microsoft Dynamics AX users, allow read-only access to the network shared folder that contains the configuration file to prevent accidental changes to the shared configuration file.