December 2017
Intermediate to advanced
434 pages
10h 14m
English
The group managed service accounts provide the same functionality as the MSAs, but they can be used on multiple servers. gMSAs provide a single identity for services running on a farm, cluster, or behind a load balancer, so they are a perfect fit for the failover cluster scenario, where the previous type of managed service accounts couldn't be used. gMSAs have the same benefit as the older MSAs where ActiveDirectory is automatically managing the account password without any service disruption.
You can create gMSAs with a similar PowerShell script, like with the MSAs:
#run this on the Domain ControllerImport-Module ActiveDirectoryNew-ADServiceAccount -name SQLService -DNSHostName sql.contoso.com -PrincipalsAllowedToRetrieveManagedPassword ...
Read now
Unlock full access