Forum Discussion

marty5's avatar
marty5
Brass Contributor
Dec 18, 2024
Solved

WSL MCC setup requires a runtime account with proper formatting for setting MCC scheduled tasks

Attempting to provision a cache node, failing with the below error.

 

WSL MCC setup requires a runtime account with proper formatting for setting MCC scheduled tasks

WSL MCC install failed (ReturnCode: 13631570)

 

Runtime account is gMSA with the format of "domain\gMSAaccount". Tried several variations, with/without quotes but none are accepted.

Error is too vague and documentation for this is lacking.

 

  • Apologies, forgot to reply to this sooner. I had missed out the $ sign at the end of the username, which was documented correctly, i.e. "domain\gMSAaccount$" was required.

3 Replies

  • marty5's avatar
    marty5
    Brass Contributor

    Apologies, forgot to reply to this sooner. I had missed out the $ sign at the end of the username, which was documented correctly, i.e. "domain\gMSAaccount$" was required.

  • Hi marty5 ,

    Make sure that the gMSA password is correct otherwise you could try with the local account to install and run MCC
    1 - First, create a new global security group for allowing access to gMSA password. Then, create a Microsoft Connected Cache-specific gMSA. Finally, add the machines that will be running MCC to the global security group so they can access the gMSA's password during MCC installation. The examples below use PowerShell cmdlets to create and provision the gMSA.
    Please note: You must substitute the appropriate domain information for your organization.
    Example: Creating a new global security group named “mccAllowedRunners”
    > New-ADGroup mccAllowedRunners -path 'OU=Groups,OU=test,dc=Contoso,DC=com' -GroupScope Global
    Example: Creating a MCC-specific gMSA account and giving newly-created global security group permissions to retrieve the gMSA password
    > New-ADServiceAccount -name mccRunner -DNSHostName mccRunner.Contoso.com -PrincipalsAllowedToRetrieveManagedPassword mccAllowedRunners
    Example: Adding relevant machine accounts to the newly-created global security group
    > Add-ADGroupMember -identity "mccAllowedRunners" -members "mccMachine1$"
    2 - Add gMSA account to the Windows 11 or Windows Server 2022 machine(s) that will be hosting MCC
    > Add-WindowsCapability -Online -Name Rsat.ActiveDirectory.DS-LDS.Tools~~~~0.0.1.0
    > Install-ADServiceAccount -Identity mccRunner
    > Test-ADServiceAccount mccRunner

Resources