Active Directory Administration Cookbook

There's more...

The interval that gMSAs use to change their passwords can be controlled using the msDS-ManagedPasswordInterval attribute. Even if password changes for computer objects has been turned off, gMSAs will continue to change their passwords. If the interval can be higher in your environment because strict regulations don't apply, set the attribute to a higher value (in days) when creating gMSAs.