Managing SPNs and ensuring it is restricted to the server that it is linked to. Includes easy password rotation using the Reset-ADServiceAccountPassword, Here we have looked at how to set up SQL Server to use a gMSA as its serviceĪccount and be able to take advantage of the capabilities that come with it. The domain name, as well as appending the account name with a $ (which denotes it When using this cmdlet, it is important to remember to qualify the account with Issuing the following PowerShell command: Service needs to have a root key in place to function. Prior to being able to create a gMSA in the domain, the Key Distribution To be able to use a gMSA as its service account If you are using Windows Server 2012 R2 as the operating system, for SQL Server Active Directory PowerShell module installed.Domain Functional Level of 2012 or higher.To be able to make use of Managed Service Accounts with SQL Server there areĬertain prerequisites that need to be met, these are as follows: Group Managed Service Account Prerequisites Groups to allow a one-to-many relationship between an account and the computers. This is done by making use of Active Directory Security Group Managed Service Accounts solve the problem of one-to-one relationshipsīetween MSA and Computer.

SQL Server 2014 introduced support for group Managed Service Accounts when running Whereas SQL Server 2012 only supports the use of Managed Service Accounts (MSA),

Sql server ma