Forum Discussion

Copper Contributor

Sep 14, 2020

ATP and group managed service account not working on RODC

We have ATP sensors set up on our domain controllers. A group managed service account (gMSA) is being used. There are a few read only domain controllers that can't seem to read the password, even th...

Icon for Microsoft rank

Microsoft

Sep 14, 2020

19873306 what OS version are those RODCs running?

Copper Contributor

Sep 15, 2020

EliOfek Server 2019. I saw the patch for 2012, but it doesn't apply here.

pugazhendhi
Brass Contributor
Sep 17, 2021
Is any patch need to install before start ATP installation?

For my case, we have tried to install ATP after installed OS and promoted as RODC, but the service is not getting start. After installed all latest patches, it's automatically started. No change made.
- MattScott1873
  Copper Contributor
  Dec 07, 2023
  We were the same. I just recently built\added some new DC's and installed ATP. Couldn't get the service to start and saw the same error in the Logs. Made sure the new machines had access to the GMSA and log on as a service enabled... still no go...
  Saw your message here and noted the server had a Defender definition update to do... so I installed that and bounced the box and voila! 🙂
  I repeated this process on all my other new DC's and it fixed every one of them.
  Thanks!
- EliOfek
  Microsoft
  Sep 18, 2021
  Only for 2019. what was the error in the logs when it failed to start before patching?
EliOfek
Microsoft
Sep 15, 2020
19873306 Then I suggest opening a support case for this one so they can go over with you on the settings to make sure nothing was missed. in some environments this can be a bit tricky to set up.
- 19873306
  Copper Contributor
  Sep 15, 2020
  EliOfek Thank you. Should this support request be opened through Azure portal?
  - EliOfek
    Microsoft
    Sep 15, 2020
    Yes

Resources