Skip to content

Instantly share code, notes, and snippets.

@artisticcheese

artisticcheese/a.ps1

Created September 9, 2017 19:36
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save artisticcheese/9677eca09d90290f9bc3da02ae727c47 to your computer and use it in GitHub Desktop.
Save artisticcheese/9677eca09d90290f9bc3da02ae727c47 to your computer and use it in GitHub Desktop.
Download ZIP
Create GMSA account
Raw
a.ps1
Import-module ActiveDirectory
Add-KdsRootKey –EffectiveTime ((get-date).addhours(-10));
New-ADServiceAccount -Name containerhost -DNSHostName servicefabric.ad.local -PrincipalsAllowedToRetrieveManagedPassword "Domain Controllers",
"domain admins", "CN=Container Hosts,CN=Builtin, DC=ad, DC=local" -KerberosEncryptionType RC4, AES128, AES256
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment