2,833
2,570
2,268
1,368
2,546
1,892
1,410
3,124
10.1K
3,497
530
5,853
1,261
1,205
1,128
3,021
429
586
610
614
2,536
476
445
506
403
744
859
555
SqlBenjamin
in
Secure AND Easy Service Account Management
on
05-28-2020
@nbuck2480 are there any INFO messages before the connection failed
message? Did you restart the services after updating the account and
perms? Depending on the steps things were done in that could be an issue
but not very likely in this case...but worth asking/throwing out there.
0 Likes
nbuck2480
in
Secure AND Easy Service Account Management
on
05-28-2020
Alright it seems that adding the gmsa to the administrators group fixed
the "Failed to create/backup SQL SSB certificate" issue. And the sccm
console is now working! But I noted that the log still shows the
following: ERROR: SQL Connection failed. Connection: CCAR_DB_ACCESS,
Type: Secure $$<Configur...
0 Likes
nbuck2480
in
Secure AND Easy Service Account Management
on
05-28-2020
I just added the DBE gmsa to the administrators in my database server
GPO, I am going to test it. Would giving full control to the Database
and log file structures
(https://docs.microsoft.com/en-us/sql/database-engine/configure-windows/configure-file-system-permissions-for-database-engine-access?vie...
0 Likes
SqlBenjamin
in
Secure AND Easy Service Account Management
on
05-28-2020
@nbuck2480 What permissions does the gMSA have on the boxes? If they are
admins then no perms should be required, if not then you will need to
make sure the ACLs are setup for the account in the appropriate folders.
What perms in SQL does the gMSA have?
0 Likes
nbuck2480
in
Secure AND Easy Service Account Management
on
05-28-2020
@SqlBenjamin Once you create the gmsa do you need to add the gmsa to the
SQL database folder security permissions with full control? I am getting
the following error in the Config Mgr setup log: INFO: SQL Connection
succeeded. Connection: SMS ACCESS, Type: Secure $$<Configuration Manager
Setup><05-2...
0 Likes