KDS Root Key - empty in PowerShell
Hi, Wanted to create gMSA account and checked status with KDS Root Key. Got a problem. What to do, if running PS cmdlet Get-KdsRootKey gives empty result, but looking into Active Directory Sites and Services (dssite.msc) I clearly see there Kds key? Should I regenerate that key by cmdlet: Add-KdsRootKey? If so, what will happen to ecisting KDS root key, which I see in dssite.msc? If we have 2 DCs, should I wait 10h or I can run with a Parameter - EffectiveImmeadiately? Reference: https://www.youtube.com/redirect?event=comments&redir_token=QUFFLUhqa3VzTWhxWlQ5R0p0bGVlRXpKU2xBQmVZNzV6QXxBQ3Jtc0tsNTVaWURZd1cwQzExcGtHQUI5OGdybll6TGZkVXBYMk5TX3BTYlJKeGdpTEpFUnBiRktNS3dub215RV9PZlVqWXhDS2VQazVuYllYMWRtMlB3WHo1OXFpb0p1R3lHaHhXWnBGV0wybFhNQ0xUaWJHUQ&q=https%3A%2F%2Fwww.jorgebernhardt.com%2Fhow-to-create-kds-root-key-using-powershell%2F&stzid=UgzZc1tXIXYaG8CPhaB4AaABAg Thanks!
