I'm configuring arcgis server to run on a group managed serviced account. I used the ServerConfigurationUtility command line tool according to this documentation https://enterprise.arcgis.com/en/server/latest/administer/windows/the-arcgis-server-account.htm and it says a password is not needed. However, I got an error 'Invalid password specified for (the group managed service account)'. Our IT told me the group managed service account doesn't have a password. They have also granted the account 'log on as a service' permission. I also tried to change the 'Log On as' for the arcgis server service to this account but the service would not start. How can I configure arcgis server to use a group managed service account? Thank you!
Dit you see this?
Group Managed Service Account be used for Windows ... - Esri Community
I wonder whether anyone found a solution to this. We are currently implementing ArcGIS Enterprise with managed server accounts. Before, access from ArcGIS Server to the database was with a service account. We registered a single sign-on database connection in the Manager for access to the database. But now, with the managed service accounts, we are running into the Bad login message, when trying to register the same database connection.
I was also experiencing this error. The root cause for me was that I had just setup the gMSA in the domain. It apparently takes 10 hours for the Kerberos key to synchronize across running servers OR if you can perform a Windows Restart then it picks up the Kerberos key and account during the restart.
@OmarF93 - please open a ticket with Esri Technical Support to investigate the problem further, if you learn anything new then share in this thread to help other people. Thank you. : )
Dear all I have the same Issue which was mentioned by @ShirleyYueLi I have created a gMSA account on AD and when switching to use that account on Enterprise 10.9.1 with : ServerConfigurationUtility.exe /username mydomain\enterprise-gmsa$ /writeconfig c:\temp\domainaccountconfig.xml I got error : invalid Password however I applied all the recommendations in that support article : How To: Configure ArcGIS Enterprise to Use a Group-Managed Service Account (esri.com) still stuck in that error
@ShirleyYueLi - just to clarify that you need to update the command below with your domain gMSA account.ServerConfigurationUtility.exe /username mydomain\enterprise-gmsa$ /writeconfig c:\temp\domainaccountconfig.xml
Tip, open a command window as "administrator" to run the command above.mydomain\enterprise-gmsa$ - you need to replace this with your domain gMSA account.
@ShirleyYueLi - your gMSA domain account might not have been configured correctly.
Getting Started with Group Managed Service Accounts | Microsoft Learn
maybe this will help: https://learn.microsoft.com/en-us/windows-server/security/group-managed-service-accounts/group-managed-service-accounts-overview
I used this command ServerConfigurationUtility.exe /username mydomain\enterprise-gmsa$ /writeconfig c:\temp\domainaccountconfig.xml but got an error "invalid password specified for ..." Is there any configuration we missed for this account? IT has granted 'log on as service' permission for this account.
ArcGIS Server account—ArcGIS Server | Documentation for ArcGIS Enterprise
ServerConfigurationUtility.exe /username mydomain\enterprise-gmsa$ /writeconfig c:\temp\domainaccountconfig.xml
can you share the info Scott and Marcelo provided directory to your IT team?
Thank you! I used the configure arcgis server account GUI and command line tool but both got an error: no password specified. Our IT told me there is no password for this gmsa account. What configurations should sys admins do? Thank you!
Thank you! I used the configure arcgis server account GUI and command line tool but both got an error: no password specified. Is a password required? Our IT told me there is no password for this gmsa account. What should I ask our IT for?
If the server (host machine) is registered by your SAs in the gMSA then it will just work. There is no configuration on the ArcGIS Server side. It's simply just a case of entering the gMSA account details as stated. All the configuration is completed by your sys admins.
If the command line is not working for you then try the GUI approach described here: https://enterprise.arcgis.com/en/server/latest/get-started/windows/what-s-included-with-arcgis-server.htm#ESRI_SECTION1_A257E9A10181416BA314EAFF5BE85D98
Angemeldete Mitglieder können Beiträge verfassen, Updates folgen und mehr. Neu hier? Registriere ein kostenloses Konto.
Find useful guides, FAQs, and documents to help you navigate and make the most of Esri Community.
