Fix GMSA on SQL Server

Kruto 106

I configure my sql servers to work with GMSA users for each service.
Then the DBA did changes with the configurations and change the service to his user.
I change back the services to the GMSA accounts but now after every restart I see an error :
The MSSQLSERVER service was unable to log on as GMSA with the currently configured password due to the following error: The user name or password is incorrect.

Regards,

Erland Sommarskog 101.4K Reputation points MVP

2021-04-22T21:44:01.337+00:00

So how did you make the change? The Services applet, or SQL Server Configuration Manager?
CarrinWu-MSFT 6,856 Reputation points

2021-04-23T05:46:23.33+00:00

Hi @Kruto , welcome to Microsoft Q&A! After research, same question for how did you make the change? Could you please provide more details for this issue?
Kruto 106 Reputation points

2021-04-25T12:22:56.783+00:00

Hello,
I configured the GMSA users when installing SQL server.
Every thing was working fine. then after awhile I gave permission to the DBA and he did changes.
It seems he change the GMSA user to his user under services.
I cannot be sure if it was the only change he did.

The status:
The services fail to start after restart.
Can start them manually after deleting the password and applying the change.
Erland Sommarskog 101.4K Reputation points MVP

2021-04-25T12:26:30.967+00:00

So you change the password and start SQL Server manually, and that runs fie. And if you now restart the machine again, what happens now?

It may be better if you discuss this directly with your DBA, rather than we try to guess what may have happened.
Kruto 106 Reputation points

2021-04-25T12:49:59.127+00:00

It fails after restart.
There nothing that DBA can add to this case the only thing he said is that he changed the services users to his.
Erland Sommarskog 101.4K Reputation points MVP

2021-04-25T12:52:07.733+00:00

Well, if the DBA can't help you, how do you expect us to help you when we don't even have access to your environment. Can you at least post an screenshot of what is in SQL Server Configuration Manager? And please do not mask any data.
CarrinWu-MSFT 6,856 Reputation points

2021-04-26T01:46:42.777+00:00

Hi @Kruto , please refer to the solution from this blog, it might be helpful.

Accepted answer

Kruto 106 Reputation points

2021-04-26T06:31:36.537+00:00

Thank you @CarrinWu-MSFT I found the solution in one of the comments.
In My case it was changing the registry for all services who uses GMSA.

I could not find this because I did not have the values on the working server .

Registry :
Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services*Service Name*
Value: ServiceAccountManaged
Datatype: REG_BINARY
Value :01 00 00 00
Please sign in to rate this answer.

1 person found this answer helpful.

0 comments No comments
Sign in to comment

Fix GMSA on SQL Server

0 additional answers