gMSA Install-ADServiceAccount without rebooting

Luke Uhren 201

Is there a recommended way to get a group managed service account gMSA working with the Install-ADServiceAccount command on the server you want it working without rebooting? I am finding it will mentioned this error and a reboot is the way for it to catch the latest changed before I can install.

"Install-ADServiceAccount : Cannot install service account. Error Message: '{Access Denied}"

If anyone has the recommended method of getting this updated without a reboot via powershell for example that would be great.

Thanks

Luke Uhren 201

FYI... found the fix. Is to run klist command below in CMD and then gpupdate command

#run in cmd for klist to clear kerberos ticket
cmd.exe /c "klist purge –li 0x3e7"
#gpupodate after on server using target computer to refresh kerberos
gpupdate /force /target:computer

Share via

gMSA Install-ADServiceAccount without rebooting

Your answer