1.Open PowerShell as an Administrator on a domain controller.
2. Create the KDS Root Key (if not already created):
Add-KdsRootKey -EffectiveImmediately
3.Create the gMSA:
New-ADServiceAccount -Name gMSA1 -DNSHostName srv1.yourdomain.com -PrincipalsAllowedToRetrieveManagedPassword "Domain Computers"
4. Install the gMSA on SRV1:
Open PowerShell on SRV1 as an Administrator.
Install the AD module if not already installed:
Install-WindowsFeature RSAT-AD-PowerShell
Install the gMSA:
Install-ADServiceAccount -Identity gMSA1
5.Test the gMSA installation:
Test-ADServiceAccount -Identity gMSA1
If the test returns True, the gMSA is successfully installed and available on SRV1.
the dns hostname is for the GMSAname :
new-adserviceAccount -Name gMSA1 -DNShostname gMSA1.contoso.org -principalAllowedToRetrieveManagedPassword "group"
the the rest is correct
This section is not available anymore. Please use the main Exam Page.AZ-800 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Krayzr
9 months, 3 weeks agoKrayzr
4 months, 1 week agononoelptirobo
2 months, 1 week agononoelptirobo
2 months, 1 week agobpaccount
11 months, 1 week ago