Group Managed Service Accounts

GPTKB entity

Statements (26)
Predicate Object
gptkbp:instanceOf Active Directory feature
gptkbp:abbreviation gMSA
gptkbp:canBe services
tasks
applications
interactive logon
https://www.w3.org/2000/01/rdf-schema#label Group Managed Service Accounts
gptkbp:introducedIn gptkb:Windows_Server_2012
gptkbp:managedBy gptkb:Active_Directory
gptkbp:managedThrough Active Directory PowerShell cmdlets
gptkbp:mayBeAssignedTo multiple computers
gptkbp:objectClass msDS-GroupManagedServiceAccount
gptkbp:passwordChangeInterval 30 days (default)
gptkbp:passwordManagement automatic
gptkbp:provides improved security
simplified management
gptkbp:replacedBy Managed Service Accounts
gptkbp:requires Windows Server 2012 or later
Key Distribution Service
domain functional level Windows Server 2012 or higher
gptkbp:supports gptkb:Kerberos_authentication
multiple servers
gptkbp:usedFor service account management
gptkbp:usedIn Windows Server environments
gptkbp:bfsParent gptkb:Windows_Server_containers
gptkbp:bfsLayer 6