Best practices for configuring and managing a Business Central on-premises instance to ensure performance, security, and maintainability

20-07-2025

Best practices for configuring and managing a Business Central on-premises instance to ensure performance, security, and maintainability:


🛠️ Infrastructure & Installation

1. System Requirements

  • Ensure hardware meets or exceeds Microsoft’s official requirements.
  • Use Windows Server (latest supported version) and SQL Server Standard/Enterprise.

2. Deployment Architecture

  • Use multi-tier architecture:
    • SQL Server for database.
    • Business Central Server for application logic.
    • Web Server for client access.
  • Consider load balancing and failover clustering for high availability.

3. Service Configuration

  • Run Business Central services under dedicated service accounts with least privilege.
  • Configure multiple NSTs (Nav Service Tiers) for different roles (e.g., background tasks, API, user sessions).

⚙️ Performance Optimization

4. SQL Server Tuning

  • Follow SQL Server best practices (e.g., memory limits, tempdb optimization).
  • Use Simple Recovery Model unless point-in-time recovery is needed.
  • Monitor index fragmentation and update statistics regularly.
  • For SQL Server best practices,  please refer the below link. 

https://rakeshcoder.in/Best-practices-to-configure-SQL-Server-for-Business-Central-on-prem-installation--/187


5. Caching & Session Management

  • Enable caching for frequently accessed data.
  • Configure session timeouts appropriately to balance performance and user experience.

🔐 Security & Compliance

6. Authentication

  • Use Windows Authentication or Azure Active Directory for secure access.
  • Implement multi-factor authentication (MFA) if possible.

7. Data Protection

  • Enable SSL/TLS encryption for all client-server communications.
  • Use database encryption and backup encryption.

8. Audit & Logging

  • Enable change log and telemetry for tracking user actions and system performance.
  • Regularly review event logs and error logs.

🔄 Maintenance & Updates

9. Backup Strategy

  • Schedule daily full backups, with transaction log backups if using full recovery.
  • Test restore procedures regularly.

10. Update Management

  • Apply cumulative updates and security patches regularly.
  • Test updates in a sandbox environment before applying to production.

📊 Monitoring & Troubleshooting

11. Monitoring Tools

  • Use Performance Monitor, SQL Profiler, and Business Central telemetry.
  • Integrate with Azure Monitor or System Center for enterprise-level monitoring.

12. Error Handling

  • Configure email alerts for service failures.
  • Use custom logging for critical business processes.

🧩 Customization & Extensions

13. AL Development Best Practices

  • Use event-based programming instead of modifying base code.
  • Keep extensions modular and version-controlled.

14. AppSource & Third-Party Tools

  • Prefer certified extensions from AppSource.
  • Validate compatibility and performance impact before installation.