Forum Discussion
Solved
MDI GMSA Forest/Multi Domain
Trying to get a GMSA to work in Child Domain. I have it setup, working, with sensor Running in the Forest Root. I followed the advise to create a Universal Group and add Domain Controllers in Fores...
The official statement states that the gMSAs' boundary is the domain and not the forest (https://docs.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/getting-started-with-group-managed-service-accounts#BKMK_Intro)
Having said that, we've accomplished to get it to work with a domain trust but not in a root-child scenario.
