Skip to content

Commit 753ea8d

Browse files
Update serviceaccounts.md
1 parent e3e754a commit 753ea8d

File tree

1 file changed

+19
-0
lines changed

1 file changed

+19
-0
lines changed

documentation/components/domain/serviceaccounts.md

Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -164,6 +164,20 @@ A missing computer will be logged but not otherwise noted.
164164

165165
> This parameter uses [name resolution](../../advanced/name-mapping.html).
166166
167+
### GroupName
168+
169+
Only thus designated principals are allowed to retrieve the password to the gMSA.
170+
Using this you can grant access to an explicit list of ActiveDirectory groups.
171+
172+
> This parameter uses [name resolution](../../advanced/name-mapping.html).
173+
174+
### KerberosEncryptionType
175+
176+
The supported Kerberos encryption types.
177+
Can be any combination of 'AES128', 'AES256', 'DES', 'RC4'
178+
179+
> Default: 'AES128','AES256'
180+
167181
### Enabled
168182

169183
Whether the account should be enabled or disabled.
@@ -179,3 +193,8 @@ Set this to $false in order to explicitly delete an existing gMSA.
179193

180194
Offer additional attributes to define.
181195
This can be either a hashtable or an object and can contain any writeable properties a gMSA can have in your organization.
196+
197+
### OldNames
198+
199+
A list of previous names the gMSA held.
200+
This causes the ADMF to trigger rename actions.

0 commit comments

Comments
 (0)