Forum Discussion

C-Fou's avatar
C-Fou
Copper Contributor
May 05, 2022

GMSA issue to fetch the password

Hi,   I have a weird issue that doesn't allow gsma account installation.   The context : 2 test Hyper-V VMs from a unique base disk containing a fresh install of Windows Server 2019 with all def...
Active Directory
LainRobertson's avatar
LainRobertson
Silver Contributor
May 06, 2022

C-Fou 

 

In your New-ADServiceAccount statement, you have mistakenly used "-PrincipalsAllowedToDelegateToAccount" where you ought to have used "-PrincipalsAllowedToRetrieveManagedPassword".

 

The "access denied" makes sense in this context.

 

Cheers,

Lain

  • C-Fou's avatar
    C-Fou
    Copper Contributor
    May 06, 2022

    LainRobertsonoh, I am such a dumb, no misunderstood, only I did it so quickly with autocompletion. worse for me, I have repeated it several times !!!! Thanks 🙂

    • LainRobertson's avatar
      LainRobertson
      Silver Contributor
      May 06, 2022

      C-Fou 

       

      Ah, we all do it (multiple times a day in my case) - don't worry about it.

       

      Cheers,

      Lain

Resources