https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/getting-started-with-group-managed-service-accounts

- An account gmsa-sql or IIs is created in AD.
- A server group is granted access to use this account to launch service or a scheduled action, and only this 2 actions.
- Customer don't know the account password because it is set by an Active Directory process and modified transparently every 30 days.
- There is information on sqlServer2012 that can't use GMSA, therefor it need to use Msa account :

http://jeffgraves.me/2014/10/07/managed-service-accounts-in-server-2012-r2/

by: Marc L. | over a year ago | Other