group managed service account for arcgis server

785
12
02-22-2024 12:48 PM
ShirleyYueLi
New Contributor III

I'm configuring arcgis server to run on a group managed serviced account. I used the ServerConfigurationUtility command line tool according to this documentation https://enterprise.arcgis.com/en/server/latest/administer/windows/the-arcgis-server-account.htm and it says a password is not needed. However, I got an error 'Invalid password specified for (the group managed service account)'. Our IT told me the group managed service account doesn't have a password. They have also granted the account 'log on as a service' permission. I also tried to change the 'Log On as' for the arcgis server service to this account but the service would not start. How can I configure arcgis server to use a group managed service account? Thank you!

0 Kudos
12 Replies
Scott_Tansley
MVP Regular Contributor

If the server (host machine) is registered by your SAs in the gMSA then it will just work.  There is no configuration on the ArcGIS Server side.  It's simply just a case of entering the gMSA account details as stated.  All the configuration is completed by your sys admins.

If the command line is not working for you then try the GUI approach described here:  https://enterprise.arcgis.com/en/server/latest/get-started/windows/what-s-included-with-arcgis-serve...

 

Scott Tansley
https://www.linkedin.com/in/scotttansley/
MarceloMarques
Esri Regular Contributor

ArcGIS Server account—ArcGIS Server | Documentation for ArcGIS Enterprise

MarceloMarques_0-1708708272187.png

ServerConfigurationUtility.exe /username mydomain\enterprise-gmsa$ /writeconfig c:\temp\domainaccountconfig.xml

| Marcelo Marques | Principal Product Engineer | Esri |
| Cloud & Database Administrator | OCP - Oracle Certified Professional |
I work with Enterprise Geodatabases since 1997.
“ I do not fear computers. I fear the lack of them." Isaac Isimov
0 Kudos
ShirleyYueLi
New Contributor III

Thank you! I used the configure arcgis server account GUI and command line tool but both got an error: no password specified. Is a password required? Our IT told me there is no password for this gmsa account. What should I ask our IT for?

0 Kudos
ShirleyYueLi
New Contributor III

Thank you! I used the configure arcgis server account GUI and command line tool but both got an error: no password specified. Our IT told me there is no password for this gmsa account. What configurations should sys admins do? Thank you!

0 Kudos
BillFox
MVP Frequent Contributor

can you share the info Scott and Marcelo provided directory to your IT team?

0 Kudos
MarceloMarques
Esri Regular Contributor

ArcGIS Server account—ArcGIS Server | Documentation for ArcGIS Enterprise

MarceloMarques_0-1708708272187.png

ServerConfigurationUtility.exe /username mydomain\enterprise-gmsa$ /writeconfig c:\temp\domainaccountconfig.xml

| Marcelo Marques | Principal Product Engineer | Esri |
| Cloud & Database Administrator | OCP - Oracle Certified Professional |
I work with Enterprise Geodatabases since 1997.
“ I do not fear computers. I fear the lack of them." Isaac Isimov
0 Kudos
ShirleyYueLi
New Contributor III

I used this command ServerConfigurationUtility.exe /username mydomain\enterprise-gmsa$ /writeconfig c:\temp\domainaccountconfig.xml but got an error "invalid password specified for ..." Is there any configuration we missed for this account? IT has granted 'log on as service' permission for this account.

0 Kudos
MarceloMarques
Esri Regular Contributor

@ShirleyYueLi - your gMSA domain account might not have been configured correctly.

Getting Started with Group Managed Service Accounts | Microsoft Learn

| Marcelo Marques | Principal Product Engineer | Esri |
| Cloud & Database Administrator | OCP - Oracle Certified Professional |
I work with Enterprise Geodatabases since 1997.
“ I do not fear computers. I fear the lack of them." Isaac Isimov
0 Kudos