Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

Microsoft AZ-800 Exam - Topic 9 Question 57 Discussion

Actual exam question for Microsoft's AZ-800 exam

Question #: 57
Topic #: 9

[All AZ-800 Questions]

SIMULATION

Task 9

You plan to create group managed service accounts (gMSAs).

You need to configure the domain to support the creation of gMSAs.

ASee the solution of this Task below

Show Suggested Answer

Suggested Answer: A

To configure the domain to support the creation of gMSAs, you need to perform the following steps:

On a domain controller or a computer that has the Remote Server Administration Tools (RSAT) installed, open PowerShell as an administrator and run the following command to install the Active Directory module:

Install-WindowsFeature -Name RSAT-AD-PowerShell

Run the following command to create a Key Distribution Service (KDS) root key, which is required for generating passwords for gMSAs. You only need to do this once per domain:

Add-KdsRootKey -EffectiveImmediately

Wait for at least 10 hours for the KDS root key to replicate to all domain controllers in the domain. Alternatively, you can use the-EffectiveTimeparameter to specify a past date and time for the KDS root key, but this is not recommended for security reasons. For more information, seeAdd-KdsRootKey.

After the KDS root key is replicated, you can create and configure gMSAs using theNew-ADServiceAccountandSet-ADServiceAccountcmdlets. For more information, seeCreate a gMSAandConfigure a gMSA.

by Mari at Sep 17, 2024, 12:06 PM

Limited Time Offer

25%

Off

Get Premium AZ-800 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ludivina

6 months ago

Sounds complicated, not sure if it's worth it.

upvoted 0 times

...

Jacquline

6 months ago

Yup, and don't forget about the Active Directory setup!

upvoted 0 times

...

Lucy

7 months ago

Wait, do you really need a KDS root key for this?

upvoted 0 times

...

Felix

7 months ago

Totally agree, it's a game changer for security!

upvoted 0 times

...

Haydee

7 months ago

gMSAs require Windows Server 2012 or later.

upvoted 0 times

...

Stephanie

7 months ago

I vaguely remember that we might need to use PowerShell to create the gMSA, similar to what we practiced in the lab.

upvoted 0 times

...

Elliott

8 months ago

I feel like there was something about needing to register the gMSA in the domain, but I’m a bit hazy on the exact steps.

upvoted 0 times

...

Otis

8 months ago

I think we need to ensure that the domain functional level is at least Windows Server 2012, but I can't recall if there are other requirements.

upvoted 0 times

...

Tegan

8 months ago

I remember we had a practice question about configuring Active Directory for gMSAs, but I'm not sure if it was about the specific permissions needed.

upvoted 0 times

...

Lai

8 months ago

This looks manageable. I'll take my time, read the question carefully, and methodically work through the configuration steps. Shouldn't be too difficult if I stay focused.

upvoted 0 times

...

Daren

8 months ago

Okay, let me think this through. I'll need to enable the necessary features and permissions in the domain. Hopefully the instructions are clear, but I may need to refer to the documentation just to be safe.

upvoted 0 times

...

Cherry

8 months ago

No problem, I've done this a few times before. I'll make sure to double-check the configuration settings to ensure I don't miss anything critical.

upvoted 0 times

...

Tijuana

8 months ago

Ugh, I'm not too familiar with gMSAs. I'll have to really focus on understanding the requirements and steps to set this up properly.

upvoted 0 times

...

Rikki

8 months ago

Hmm, this seems straightforward enough. I'll need to review the steps to configure the domain for gMSAs, but I think I can handle this.

upvoted 0 times

...

Margot

8 months ago

Based on my understanding of security roles, I believe the information system auditor is the one who inspects the security policies and procedures.

upvoted 0 times

...

Lai

2 years ago

Hmm, gMSAs, huh? Sounds like a great way to manage my monthly book club subscriptions. Where do I sign up?

upvoted 0 times

Ashleigh

2 years ago

C) Create a new group managed service account (gMSA)

upvoted 0 times

...

Devora

2 years ago

B) Create a Key Distribution Service (KDS) root key

upvoted 0 times

...

Gregoria

2 years ago

A) Configure the Active Directory schema to support gMSAs

upvoted 0 times

...

...

Dick

2 years ago

I'm not sure how to configure the domain for gMSAs, any tips?

upvoted 0 times

...

Eleonore

2 years ago

I agree, gMSAs can help with managing service accounts more efficiently.

upvoted 0 times

...

Glenn

2 years ago

I think creating gMSAs is important for security.

upvoted 0 times

...

Franklyn

2 years ago

Configuring the domain for gMSAs? Piece of cake. I bet I could do it with one hand tied behind my back and my eyes closed.

upvoted 0 times

...

Alex

2 years ago

Gotta love that gMSA action! Reminds me of my grandpa's group managed lawn service account. Good times.

upvoted 0 times

Maxima

2 years ago

I remember my grandpa's group managed lawn service account, good memories.

upvoted 0 times

...

Nicolette

2 years ago

D) Add the gMSA to the necessary groups

upvoted 0 times

...

Dewitt

2 years ago

C) Create a gMSA object

upvoted 0 times

...

Katie

2 years ago

Yeah, it's a great feature for managing service accounts.

upvoted 0 times

...

Raina

2 years ago

I'm excited to set up those gMSAs!

upvoted 0 times

...

Stephane

2 years ago

B) Create a KDS root key

upvoted 0 times

...

Francesco

2 years ago

A) Configure the Active Directory schema to support gMSAs

upvoted 0 times

...

...