1, How to use a shared configuration file for Dynamics AX2012 client.
Option 1, when you install Dynamics AX2012 client, you can point a shared configuration file for users on Specify a location for configuration settings. If the configuration file on the network, you should map a path for the configuration file. Then browse the path such as Z:\aos1config.axc.
Option 2, Open Dynamics AX configuration utility, in Active configuration store, if not a (network) path, it should be [Registry].
If is a path, it should be pointed to a path such as Z:\aos1config.axc. Click Manage button, the last button: Set Configuration Store, you can point a client configuration file for the client.
You'll find the connection tab in configuration utility is blank. All parameters will be from the configuration file which you pointed.
2, Security configuration example in Dynamics AX2012
Step 1, Create a user which existed in AD named test1.
Step 2, Select a role named Accounting Supervisor(LedgerAccountSupervisor).
Step 3, If you want test1 to access multi-company such cee and ceu. Please select Accounting Supervisor role on the user option, and click Assign organizations button, grant cee and ceu permission for test1.
Step 4, Step 3 is done, you'll find that test1 can't select company code for change company.
Step 5, Create a role named Company select(DataAreaSelect) for select company. And Add a privilege named SysDataAreaSelect in the role: Company select(DataAreaSelect) ->Privileges.
Step 6, If users want to use "Advanced filter/sort (Inquiry)" on a main form(Such as Fixed Asset master form), you need add three tables on the Permissions->Tables node of the role: Company select(DataAreaSelect). Three tables are: TmpSysQuery, TmpSysQueryCompanyRange& TmpSysQueryValidTimeRange.
Step 7, Assign cee and ceu organization for Company select(DataAreaSelect) role.
Now you'll find test1 can change company to access cee and ceu. Both company he is accounting supervisor
Of course, you also add SysDataAreaSelect privilege on the role:Accounting Supervisor(LedgerAccountSupervisor) directly.