Will GPO settings be configured for GMSA accounts?

Anonymous
2024-04-22T08:08:52+00:00

Hi,

I would like to check if anyone have faced the issue when using GMSA account for a server and following CIS benchmark for windows servers 2019. The below are some of the plugin number that was flagged out for account which have GMSA account:

  1. 1000570 19.1.3.1 Ensure 'Enable Screen saver' is set to 'Enabled'

Even tho we have configure GPO to be push down to the servers, GMSA account are being flagged out as not configured.

Is there a way to configure it or is there any documentation that states that is it not possible?

Thank you

Windows Server Identity and access Deploy group policy objects

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question. To protect privacy, user profiles for migrated questions are anonymized.

0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Anonymous
    2024-04-22T08:50:00+00:00

    Hello MHHUANG,

    Thank you for posting in Microsoft Community forum.

    1000570 19.1.3.1 Ensure 'Enable Screen saver' is set to 'Enabled'

    A: Where did you configure it?

    Even tho we have configure GPO to be push down to the servers, GMSA account are being flagged out as not configured.

    A: What specific GPO setting did you configure and set the GMSA?

    If you have any question or concern, please feel free to let us know.

    Best Regards,

    Daisy Zhou

    0 comments No comments