Update manage-group-managed-service-accounts.md #8107
Conversation
|
Learn Build status updates of commit ac4202f: ✅ Validation status: passed
For more details, please refer to the build report. |
|
#assign: @robinharwood, @dknappettmsft @robinharwood @dknappettmsft #label:"aq-pr-triaged" |
prmerger-automator
bot
added
the
aq-pr-triaged
|
@WAftring : Thanks for your contribution! The author(s) and reviewer(s) have been notified to review your proposed change. |
prmerger-automator
bot
added
ad-ds/subsvc
Change sent to author
windows-server/svc
labels
There was a problem hiding this comment.
Pull request overview
This PR adds documentation about Kerberos encryption type requirements for systems using group-managed service accounts (gMSAs).
- Adds a new requirement bullet point explaining that systems must support required Kerberos encryption types to use gMSAs
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
...ged-service-accounts/group-managed-service-accounts/manage-group-managed-service-accounts.md
Outdated
Show resolved
Hide resolved
|
|
||
| - All systems involved in the authentication process must have synchronized clocks. Kerberos is sensitive to time configuration, and discrepancies can cause authentication failures. | ||
|
|
||
| - All systems that are intended to logon as, or be installed with a gMSA must support Kerberos encryption types required by gMSA. Systems that do not meet this requirement cannot log on or install gMSA. |
There was a problem hiding this comment.
The phrasing "cannot log on or install gMSA" is unclear. It should be "cannot log on as a gMSA or have a gMSA installed" to maintain parallel structure and clarity with the first part of the sentence.
| - All systems that are intended to logon as, or be installed with a gMSA must support Kerberos encryption types required by gMSA. Systems that do not meet this requirement cannot log on or install gMSA. | |
| - All systems that are intended to log on as a gMSA or have a gMSA installed must support the Kerberos encryption types required by gMSA. Systems that do not meet this requirement cannot log on as a gMSA or have a gMSA installed. |
…accounts/group-managed-service-accounts/manage-group-managed-service-accounts.md Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
|
Learn Build status updates of commit 9a744d6: ✅ Validation status: passed
For more details, please refer to the build report. |
4 participants
No description provided.