TopicActive Directory →
Simple definition
A service account automatically managed by Active Directory.
Technical definition
Group Managed Service Account uses a long password automatically renewed and can be used by multiple authorized hosts.
What is it used for ?
Avoid static passwords from service accounts.
Practical example
Windows service on multiple servers can work with the same gMSA.
Common issues
- Host not allowed to retrieve password
- Incompatible service
- SPN mismanaged
Related terms
Key takeaway: Exact behavior and commands may vary depending on versions, products and architectures.
See also: KDS Root Key.