Active Directory
A set of directory-based technologies included in Windows Server.
6,975 questions
gMSA Install-ADServiceAccount without rebooting
Luke Uhren
201
Reputation points
Is there a recommended way to get a group managed service account gMSA working with the Install-ADServiceAccount command on the server you want it working without rebooting? I am finding it will mentioned this error and a reboot is the way for it to catch the latest changed before I can install.
"Install-ADServiceAccount : Cannot install service account. Error Message: '{Access Denied}"
If anyone has the recommended method of getting this updated without a reboot via powershell for example that would be great.
Thanks
Active Directory
Windows Server PowerShell
Windows Server PowerShell
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.PowerShell: A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
5,628 questions
{count} votes
-
Luke Uhren 201 Reputation points
2023-11-28T18:43:20.3766667+00:00 FYI... found the fix. Is to run klist command below in CMD and then gpupdate command
#run in cmd for klist to clear kerberos ticket cmd.exe /c "klist purge –li 0x3e7" #gpupodate after on server using target computer to refresh kerberos gpupdate /force /target:computer
Sign in to comment
Sign in to answer