How to use (Group) Managed Service Accounts

pull/155/head
beatcracker 2016-12-08 19:10:20 +03:00 committed by GitHub
parent ab4a5c512e
commit 738ce95804
1 changed files with 11 additions and 1 deletions

View File

@ -201,6 +201,16 @@ It is possible to specify the useraccount (and password) that the service will r
The `<allowservicelogon>` is optional.
If set to `true`, will automatically set the "Allow Log On As A Service" right to the listed account.
To use [(Group) Managed Service Accounts](https://technet.microsoft.com/en-us/library/hh831782.aspx) append `$` to the account name and remove `<password>` element:
```
<serviceaccount>
<domain>YOURDOMAIN</domain>
<user>gmsa_account$</user>
<allowservicelogon>true</allowservicelogon>
</serviceaccount>
```
### Working directory
Some services need to run with a working directory specified.
To do this, specify a `<workingdirectory>` element like this: