Skip to content

Instantly share code, notes, and snippets.

What would you like to do?
Create GMSA account
Import-module ActiveDirectory
Add-KdsRootKey –EffectiveTime ((get-date).addhours(-10));
New-ADServiceAccount -Name containerhost -DNSHostName -PrincipalsAllowedToRetrieveManagedPassword "Domain Controllers",
"domain admins", "CN=Container Hosts,CN=Builtin, DC=ad, DC=local" -KerberosEncryptionType RC4, AES128, AES256
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.