ActiveDirectoryDsc icon indicating copy to clipboard operation
ActiveDirectoryDsc copied to clipboard

ADManagedServiceAccount: KeberosEncryptionType doesn't work on creation

Open Erwan-loot opened this issue 4 years ago • 0 comments

Exemple if you create a account with KerberosEncryptionType = AES256 The creation of a GMSA account let the parameter "KerberosEncryptionType" in {RC4, AES128, AES256} (Default behavior when you let this paramter empty) When you reapply a second time while the account is already created the parameter is changed correctly to AES256

Add the parameter kerberosencryptiontype in the creation as the CMDLET

new-adserviceaccount -kerberosencryptiontype

Erwan-loot avatar Apr 07 '21 12:04 Erwan-loot