If the app which you will be deploying to a Windows Container requires Active Directory support, then you will need to obtain at least one Group Managed Service Account (gMSA). In this post we will describe how to create/obtain a gMSA, in later posts we will show you how to apply them to Windows Containers.
- If you have Active Directory Domain Admin privileges then you can create your own gMSA via the guidance provided at Windows Server 2012: Group Managed Service Accounts.
- If you don’t have Domain Admin privileges then you will need to contact a domain admin within your organization for assistance.
- Microsoft employees may obtain gMSAs via Creating and Implementing Group Managed Service Accounts