Cyber Monday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft Exam AZ-800 Topic 9 Question 57 Discussion

Actual exam question for Microsoft's AZ-800 exam
Question #: 57
Topic #: 9
[All AZ-800 Questions]

SIMULATION

Task 9

You plan to create group managed service accounts (gMSAs).

You need to configure the domain to support the creation of gMSAs.

Show Suggested Answer Hide Answer
Suggested Answer: A

To configure the domain to support the creation of gMSAs, you need to perform the following steps:

On a domain controller or a computer that has the Remote Server Administration Tools (RSAT) installed, open PowerShell as an administrator and run the following command to install the Active Directory module:

Install-WindowsFeature -Name RSAT-AD-PowerShell

Run the following command to create a Key Distribution Service (KDS) root key, which is required for generating passwords for gMSAs. You only need to do this once per domain:

Add-KdsRootKey -EffectiveImmediately

Wait for at least 10 hours for the KDS root key to replicate to all domain controllers in the domain. Alternatively, you can use the-EffectiveTimeparameter to specify a past date and time for the KDS root key, but this is not recommended for security reasons. For more information, seeAdd-KdsRootKey.

After the KDS root key is replicated, you can create and configure gMSAs using theNew-ADServiceAccountandSet-ADServiceAccountcmdlets. For more information, seeCreate a gMSAandConfigure a gMSA.


by Mari at Sep 17, 2024, 12:06 PM

Limited Time Offer

25%

Off

Get Premium AZ-800 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Lai
2 months ago
Hmm, gMSAs, huh? Sounds like a great way to manage my monthly book club subscriptions. Where do I sign up?
upvoted 0 times
Ashleigh
26 days ago
C) Create a new group managed service account (gMSA)
upvoted 0 times
...
Devora
1 months ago
B) Create a Key Distribution Service (KDS) root key
upvoted 0 times
...
Gregoria
1 months ago
A) Configure the Active Directory schema to support gMSAs
upvoted 0 times
...
...
Dick
2 months ago
I'm not sure how to configure the domain for gMSAs, any tips?
upvoted 0 times
...
Eleonore
2 months ago
I agree, gMSAs can help with managing service accounts more efficiently.
upvoted 0 times
...
Glenn
2 months ago
I think creating gMSAs is important for security.
upvoted 0 times
...
Franklyn
3 months ago
Configuring the domain for gMSAs? Piece of cake. I bet I could do it with one hand tied behind my back and my eyes closed.
upvoted 0 times
...
Alex
3 months ago
Gotta love that gMSA action! Reminds me of my grandpa's group managed lawn service account. Good times.
upvoted 0 times
Maxima
2 months ago
I remember my grandpa's group managed lawn service account, good memories.
upvoted 0 times
...
Nicolette
2 months ago
D) Add the gMSA to the necessary groups
upvoted 0 times
...
Dewitt
2 months ago
C) Create a gMSA object
upvoted 0 times
...
Katie
2 months ago
Yeah, it's a great feature for managing service accounts.
upvoted 0 times
...
Raina
2 months ago
I'm excited to set up those gMSAs!
upvoted 0 times
...
Stephane
2 months ago
B) Create a KDS root key
upvoted 0 times
...
Francesco
2 months ago
A) Configure the Active Directory schema to support gMSAs
upvoted 0 times
...
...

Save Cancel