Implement group managed service accounts (gMSAs)
This guide outlines the steps to implement group managed service accounts (gMSAs) in an Active Directory environment using PowerShell and security groups.
#gmsa
Add-KdsRootKey –EffectiveTime ((get-date).addhours(-10))
New-ADServiceAccount –Name iis –DNSHostName servern2 –PrincipalsAllowedToRetrieveManagedPassword servern2$
Add-ADComputerServiceAccount –identity servern2 –ServiceAccount iis
Get-ADServiceAccount -Filter *