How to Set a gMSA account to Account Not Delegate ( Account is sensitive and cannot be delegated )

Use the below to find the SAMAccountName of the AD GMSA

Get-ADServiceAccount -Filter * -Properties Name, SAMAccountName, DistinguishedName | Format-Table Name, SAMAccountName, DistinguishedName -AutoSize
$gmsa = Get-ADServiceAccount -Identity SAMAccountName$
Set-ADAccountControl -Identity $gmsa -AccountNotDelegated $true

1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading...