Our applications use a proxy user account to actually make changes or updates to Active Directory. The end user needs no elevated permissions in Active Directory; all updates use the proxy account. We sometimes refer to this account as a "service" or "service / proxy" account though technically "service" is not correct; there is no actual service running. The service / proxy account must be delegated the permissions necessary to update user objects in Active Directory. For more information on common problems with the service / proxy account, see the TechNote article Common Problems with the Service / Proxy Account.
Most organizations do require passwords of accounts with elevated permissions to be changed periodically. Or, you may find that you want to change the actual account name.
When you configure our applications, you also must specify the Active Directory domain controller and the DNS domain name of the Active Directory.
Changing the domain controller name, domain name, service / proxy account name, and the service / proxy account password are changed using the application's Configuration wizard. This program is found on the IIS Server on which the application is hosted in the application .\Configuration folder. In the example of Directory Update, by default it is found in the c:\inetpub\wwwroot\DirectoryUpdate\Configuration folder.
Last Review: 19 December 2018