Return
-
Title
Is it possible to use a Group Managed Service Account (gMSA) as a user to run processes on Unix/Linux? -
Description
Is it possible to use a Group Managed Service Account (gMSA) as a user to run processes on Unix/Linux?
-
Resolution
No it is not possible to use a gMSA as a user to run processes on Unix/Linux.
The gMSA is created with an objectCategory of ms-DS-Group-Managed-Service-Account:
----------------------------
objectCategory: CN=ms-DS-Group-Managed-Service-Account,CN=Schema,CN=Configuration,DC=mydomain,DC=com
objectClass: user
objectClass: computer
objectClass: msDS-GroupManagedServiceAccount
----------------------------
Therefore the client is unable to cache this account.