This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

gMSA provisioning: edsvaPrincipalsAllowedToRetrieveManagedPassword not returning computer objects in Web-UI

Hi guys,

I'm trying to configure a gMSA provisioning workflow in ARS 6.9 and came across some strange behavior. When you try to specify the computers and groups the gMSA will be used on (edsvaPrincipalsAllowedToRetrieveManagedPassword), the web interface search will only return users/groups but no computers. When you use the MMC to configure that attribute, it will work properly and also show computer objects.

So in this case, if you don't want to use the console, you would always have to specify a group and could not just add one single computer.

Is this a bug in the Web UI or am I missing something here?

Big thanks in advance,
Jochen

Parents
  • Thanks for the quick reply,

    I'll open a ticket.

    We have created an ARS site where IT-guys can provising different kinds of accounts (real users, consultants, service- / test-accounts etc.) the gMSA will be added there, so I actually meant "provisioning process". :)

    Thanks,
    Jochen
Reply
  • Thanks for the quick reply,

    I'll open a ticket.

    We have created an ARS site where IT-guys can provising different kinds of accounts (real users, consultants, service- / test-accounts etc.) the gMSA will be added there, so I actually meant "provisioning process". :)

    Thanks,
    Jochen
Children
No Data