Group Managed Service Accounts

If the app which you will be deploying to a Windows Container requires Active Directory support, you will need to obtain at least one Group Managed Service Account (gMSA). In this post we will describe how to create/obtain a gMSA, in a later post we will show you how to apply them to Windows Containers.

• If you have Active Directory Domain Admin privileges then you can create your own gMSA via the guidance provided at Windows Server 2012: Group Managed Service Accounts.
• If you don't have Domain Admin privileges then you will need to contact a domain admin within your organization for assistance.
• Microsoft employees may obtain gMSAs via Creating and Implementing Group Managed Service Accounts