Not all Windows are shinny,

I hope I can help them make shine for you

GMSA: SERVER PREPARATION AND MODIFY THE INSTALL
In my previous blogs I talked about what Group Managed Service accounts are, what you need to have enabled in your Active Directory and the AD objects we needed before we can even think about using them to ease our SQL installation. But we are not there yet. In this blog post I will talk about further AD Actions and what you can do to install your server immediately with that GMSA account. As we saw previously, we have a GMSA account now, a Group where we need to put the computeraccounts in and something arranged for getting our Service…
GMSA: CREATE THE ACCOUNTS AND THE GROUP
So… After creating the KDC keys in your Active Directory we can continue with where it all is about: creating the GMSA. Before we will create the account, we first need to create a group. This group will hold all of the computeraccounts of the servers which run the services with the gMSA acccounts. It is a good practice to follow your conventions. These conventions will merely hold naming conventions, place where your group will reside and supportable items. In my case, I will just create a group named “Maroli-mgmt.SQL2019DE.gs” This is the group which will hold all the SQL…
GROUP MANAGED SERVICE ACCOUNTS: PREPARE YOUR DOMAIN
Last posts I have been talking about Group Managed Service Accounts (GMSA). I will continue on that journey with this blog. Group managed Service accounts are nice, but you need to prepare it very well, otherwise you end up with a non working non supported estate. There are some things one should know before continue. It is wise to make all your steps repeatable, each time, over and over. You also should test it on a test environment first. You can create a simpel test environment on your laptop with Lability or just with hyper-v enabled. It is up to…
  • 1
  • 2