Group Managed Service Accounts

URI: https://gptkb.org/entity/Group_Managed_Service_Accounts
GPTKB entity
Statements (29)
Predicate Object
gptkbp:instanceOf gptkb:Active_Directory_feature
gptkbp:abbreviation gMSA
gptkbp:canBe services
tasks
applications
interactive logon
gptkbp:introducedIn gptkb:Windows_Server_2012
gptkbp:managedBy gptkb:Active_Directory
gptkbp:managedThrough Active Directory PowerShell cmdlets
gptkbp:mayBeAssignedTo multiple computers
gptkbp:objectClass msDS-GroupManagedServiceAccount
gptkbp:passwordChangeInterval 30 days (default)
gptkbp:passwordManagement automatic
gptkbp:provides improved security
simplified management
gptkbp:replacedBy Managed Service Accounts
gptkbp:requires Windows Server 2012 or later
Key Distribution Service
domain functional level Windows Server 2012 or higher
gptkbp:supports gptkb:Kerberos_authentication
multiple servers
gptkbp:usedFor service account management
gptkbp:usedIn Windows Server environments
gptkbp:bfsParent gptkb:AD_FS_2019
gptkb:Windows_Server_2022_Active_Directory
gptkb:Windows_Server_containers
gptkb:Improved_Group_Managed_Service_Accounts
gptkbp:bfsLayer 7
https://www.w3.org/2000/01/rdf-schema#label Group Managed Service Accounts