Active Directory managed service account clarification

Question

Hello Everyone,

I need some clarification and assistance in creating the gMSA that will be used in every IIS server across the Single Forest AD domain.

How can I check if My AD Domain is capable of creating this gMSA ?

Any assistance would be very much appreciated.

Thanks,

Answer 1

First link from google: https://learn.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/getting-started-with-group-managed-service-accounts#BKMK_gMSA_Req

Answer 2

Does the result from the PowerShell script below can also be the proof that gMSA will works?

Get-KdsRootKey
Get-KdsConfiguration