You have the following Windows PowerShell Output.
You need to create a Managed Service Account.
What should you do?
A.
Run New-ADServiceAccount –Name “service01” –DNSHostName service01.contoso.com –
SAMAccountName service01.
B.
Run New-AuthenticationPolicySilo, and then run New-ADServiceAccount –Name “service01” –
DNSHostName service01.contoso.com.
C.
Run Add-KDSRootKey, and then run New-ADServiceAccount –Name “service01” –DNSHostName
service01.contoso.com.
D.
Run Set-KDSConfiguration, and then run New-ADServiceAccount –Name “service01” –
DNSHostName service01.contoso.com.
Explanation:
From the exhibit we see that the required key does not exist. First we create this key, then we create
the managed service account.
The Add-KdsRootKey cmdlet generates a new root key for the Microsoft Group Key Distribution
Service (KdsSvc) within Active Directory (AD). The Microsoft Group KdsSvc generates new group keys
from the new root key.
The New-ADServiceAccount cmdlet creates a new Active Directory managed service account.New-ADServiceAccount
https://technet.microsoft.com/en-us/library/hh852236(v=wps.630).aspxAdd-KdsRootKey
ttps://technet.microsoft.com/en-us/library/jj852117(v=wps.630).aspx
http://jeffgraves.me/2014/10/07/managed-service-accounts-in-server-2012-r2/
i used in my lab:
Add-KdsRootKey -EffectiveTime ((get-date).addhours(-10))
New-ADServiceAccount -Name “service1” -DNSHostName “w2012dc1.Has.local” -Enabled $true
#and
New-ADServiceAccount serviceX -DNSHostName “w2012dc1.Has.local”
and it worked perfectly
0
0
Correct. If using a different variant of the command (such as Add-KdsRootKey Add-KDSRootKey -EffectiveImmediately), you may have to wait 10 hours before you can create the MSA. The KdsRootKey is forest wide and only has to be created once.
0
0
Please go to the sites we stick to, such as this one, as it represents our picks in the web.
0
0
Here is an excellent Weblog You may Discover Fascinating that we Encourage You
0
0
one of our visitors a short while ago proposed the following website
0
0
The details mentioned inside the write-up are a number of the most beneficial out there
0
0