SCCM Group Managed Service Account

[sbuck]

We're thinking of using Group Managed Service Accounts in place of some of our Domain Admin Accounts.  Would this work in SCCM?

[GarthMJ]

Which accounts are you talking about? Using with SCCM how?

[sbuck]

18 minutes ago, GarthMJ said:

Which accounts are you talking about? Using with SCCM how?

One of our Domain Admin accounts is used in several places within SCCM and it's also used across multiple servers.  I'm trying to find the best way to make a change to either make an SCCM specific Domain Admin account, or potentially using one of these gmsa's.  We have a Sysadmin that's leaving and so we're in the process of changing passwords and/or accounts.

[jparlop]

This is a interesting topic, finally could you use gmsa accounts instead of Domain Admin account for whom accounts that are used in several places by SCCM?

[lcruisader]

On 2/9/2018 at 11:05 AM, sbuck said:

One of our Domain Admin accounts is used in several places within SCCM and it's also used across multiple servers.  I'm trying to find the best way to make a change to either make an SCCM specific Domain Admin account, or potentially using one of these gmsa's.  We have a Sysadmin that's leaving and so we're in the process of changing passwords and/or accounts.

Any update to this? What did you end up doing?