This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(265.6, 23%, 35%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EV%3C/text%3E%3C/svg%3E)
Hi,
Is it possible to use GMSA account to connect programmatically to a FTP location?
use case is this application program is hosted under a windows service which is run by this GMSA account. application program tries to connect to FTP location and download or upload files.
what are best practices?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Hi Vijay,
Thanks for your post.
When you are setting up the FTP role, it is recommended to create a FTP user group in the server. You can try to add the GMSA account to the group with the following guide and then test the connection.
Best Regards,
Ian Xue
If the Answer is helpful, please click "Accept Answer" and upvote it.
Thank you Ian.
Also wanted to confirm if this will support sftp? for example sftp://myserver.com:22 ?
thanks
Vijay
Thank you Ian, Do you know if this will support sftp for example sftp://myserver.domain.com:22?
Hi Vijay,
Although I don’t have corresponding test environment to test, I think the answer is Yes. There is one similar case and can successfully use GMSA account to access the FTP location. Just for your reference and hope it is helpful.
That link applies to the MicroFocus product "Reflection for Secure IT". The OP did not specify what SSH software he was using. If he is using the OpenSSH feature of Windows then public/private key authentication would probably be the best option. The documentation says that GSSAPIAuthentication is available, but as with your comment about a test environment, I have not tested that. https://learn.microsoft.com/en-us/windows-server/administration/openssh/openssh_install_firstuse?tabs=gui https://learn.microsoft.com/en-us/windows-server/administration/openssh/openssh_server_configuration https://learn.microsoft.com/en-us/windows-server/administration/openssh/openssh_keymanagement
