Active-Directory Attribute msDS-KeyCredentialLink

Iron Contributor

Active-Directory Attribute msDS-KeyCredentialLink,

I could not see this attribute being populated: -

1.     Even after configuring WHfB (CloudAzureADKerberos)

2.     Even after BitLocker – Infact I also did the Recovery Key thing on my PC to


3.     Nobody cloud confirm whether the Credential Guard is the reason here.

4.     Now suddenly, this attribute is populated, I checked for all the changes for this object in AD, Again, there is no trace for msDS-KeyCredentialLink.

6.     However, what I see is the addition of this SPN value CmRcService/Host which is related to MECM.

a.      Is this known MECM Remote Mgmt. uses this attribute??

0 Replies