GMSA service account for Entra Connect and in protected users group

Question

Hi

Is it recommended to add GMSA service account used for Entra Connect server to protected users group ?

Answer 1

Hi @LULU-6701

The protected users group protect user objects and not GMSA. So you don't need to add a GMSA account as member of protected users group because this group protect only user object.

For user accounts used as a service account, they should not be added in protected users.

---

Please don't forget to accept helpful answer

---