Determine AX Service pack installation

We are using AX 2009
1- How can i determine whether the SP1 installed on AX 2009 or not ?
2- IF i install Base components "DB,File Application, AOS, Client " and i applied the Sp1 , Later  i install Reporting extensions , EP ..etc from AX 2009 DVD , should i Re-install the Sp1 to be applied on these components?
3- Should i install SP1 on Client Pc Also? or it will be updated automatically when connected to server that has SP1?
4- in AX documentation , they recommend that the AOS service account in active directory has the following charterstics
   A -Must be a dedicated account
   B - Must have a password that does not expire
    C- Must not have interactive logon rights
It's ok for the A,B but how can i implement the C , there's no such option when create a user in windows server Active directory , So how can i do that in steps please?

Who is Participating?
quale-kaizenConnect With a Mentor Commented:
If you don't have Group Policy Management Console installed you may have to install it.

1) Create appropriate security group for the service account
2) Create new Organizational unit that includes all the computers in the domain
3) In the GPMC create new Group Policy Object
4) Add the security group to the GPO (the GPO should apply only to the service security group you created in step 1)
5) Set Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> User Rights Assignment -> Deny log on locally
6) Link the GPO and the OU

In production environment you have to be extreemly careful NOT to disable login rights for all the users in the domain.
1) Help -> About -> If your version number starts with 5.0.1500.* you have SP1 installed.
2) Yes
3) Client server should have the same SP/RU level. You have to install SP1 on the clients too.
4) This can be done with new GPO in the Group Policy Management Console
ali_alannahAuthor Commented:
Hi quale-kaizen
Could please tell how to do it with GPO step by step
Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

ali_alannahAuthor Commented:
BTW, in AD users and computers you can specify that the AX service account can logon only on the AX application servers.
ali_alannahAuthor Commented:
Yes ,thanks for your advice
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.