ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 185 - AZ-800 discussion

Report
Export

SIMULATION LAB 9

You plan to create group managed service accounts (gMSAs).

You need to configure the domain to support the creation of gMSAs.

A.
See the solution of this Task below
Answers
A.
See the solution of this Task below
Suggested answer: A

Explanation:

To configure the domain to support the creation of gMSAs, you need to perform the following steps:

On a domain controller or a computer that has the Remote Server Administration Tools (RSAT) installed, open PowerShell as an administrator and run the following command to install the Active Directory module:

Install-WindowsFeature -Name RSAT-AD-PowerShell

Run the following command to create a Key Distribution Service (KDS) root key, which is required for generating passwords for gMSAs. You only need to do this once per domain:

Add-KdsRootKey -EffectiveImmediately

Wait for at least 10 hours for the KDS root key to replicate to all domain controllers in the domain. Alternatively, you can use the-EffectiveTimeparameter to specify a past date and time for the KDS root key, but this is not recommended for security reasons. For more information, seeAdd-KdsRootKey.

After the KDS root key is replicated, you can create and configure gMSAs using theNew-ADServiceAccountandSet-ADServiceAccountcmdlets. For more information, seeCreate a gMSAandConfigure a gMSA.

asked 02/10/2024
olanrewaju malomo
31 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first