topic hubAdministration & Setupofficial - Microsoftreviewed - checked by Opus

Administration

Administration for Business Central on-premises covers tools and setup for running a deployment: the Administration Shell and Administration Center, server, web server and database configuration, authentication, encryption, monitoring, and integrations with Entra ID, Excel, Outlook, Key Vault and Dynamics 365 Sales. It answers how-to questions about configuring and operating on-premises environments.

Path: Business Central on-premises > Administration · tier official · system administration · narrative reviewed (checked by Opus)

Overview

This section is for administrators of on-premises Business Central. It starts with the two management tools: the Administration Shell (PowerShell cmdlets for server instances, web server instances, databases, users and extensions) and the Administration Center, a Microsoft Management Console snap-in for managing instances, tenants and remote servers. Subtopics cover each layer of the deployment: server instance settings, the web server (navsettings.json on IIS), the SQL database, user authentication, server monitoring, and database performance analysis. Own pages cover cross-cutting tasks: database authentication, data encryption keys, session timeout, and registering the app in Microsoft Entra ID. Integration pages cover the Excel add-in, Outlook add-ins, App Key Vaults and preparing Dynamics 365 Sales. The Excel, Outlook and Key Vault setups rely on Microsoft Entra ID registration and authentication. The Sales page covers creating the integration user and installing the integration solution. For orientation, use the management tools and the core configuration pages first, then the integration pages.

Key points

  • The Administration Shell offers PowerShell cmdlets for server instances, web server instances, extensions, users and databases, and supports PowerShell 7. The page refers to version 28 (2026 release wave 1).
  • The Administration Center is an MMC snap-in for creating server instances, managing tenants and connecting to remote servers.
  • Database authentication sets up SQL Server authentication for single-tenant and multitenant deployments, including encryption key setup and encrypted connections.
  • Data encryption uses the .NET Data Protection API. Each tenant supports one key, managed through export, import and delete.
  • Session timeout is controlled by settings such as ClientServicesIdleClientTimeout, SessionTimeout, ClientServicesReconnectPeriod and ClientServicesKeepAliveInterval.
  • Registering in Microsoft Entra ID (client secret, API permissions) enables Power BI, Universal Print and the Excel and Outlook add-ins.
  • Outlook add-ins (Contact Insights, Document View) can be deployed by centralized, automated individual or manual deployment.
  • Subtopics cover server and web server settings, SQL tuning, monitoring with performance counters and ETW, and slow query analysis with SqlLongRunningThreshold and Query Store.

Subtopics

More Learn pages

Business Central pages and reports

The pages, reports and queries this hub’s Learn pages name (ms.search.form, API reference), joined to the code by exact object id (data/index/docs-objects.json); a page shows the table it runs on.

Source: Microsoft Learn (CC BY 4.0). Descriptions are Learn’s own.

What Learn documents here 8 of 38 Learn pages

Show 30 more