Create A MSA Group Using PowerShell – Server 2012
Open PowerShell: Import-Module Activedirectory
Create the Service Account:
New-ADServiceAccount -name -Enabled $true -DNSHostName .domain.com -PrincipalsAllowedToRetrieveManagedPassword “”
Example:
New-ADServiceAccount -name MSA1 -Enabled $true -DNSHostName MSA1.domain.com -PrincipalsAllowedToRetrieveManagedPassword “Sql Server Group”
Add computer to service account:
Add-ADComputerServiceAccount -Identity -ServiceAccount $
Example:
Add-ADComputerServiceAccount -Identity SQL1 -ServiceAccount MSA1$
Install Service Account:
Install-ADServiceAccount -Identity $
Example:
Install-ADServiceAccount -Identity MSA1$
To test to see if this has worked:
Test-ADServiceAccount -Identity $
Example:
Test-ADServiceAccount -Identity MSA1$
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd391964%28v%3dws.10%29
Comments
Post a Comment