Select to view content in your preferred language

group managed service account for arcgis server

2006
13
02-22-2024 12:48 PM
ShirleyYueLi
Emerging Contributor

I'm configuring arcgis server to run on a group managed serviced account. I used the ServerConfigurationUtility command line tool according to this documentation https://enterprise.arcgis.com/en/server/latest/administer/windows/the-arcgis-server-account.htm and it says a password is not needed. However, I got an error 'Invalid password specified for (the group managed service account)'. Our IT told me the group managed service account doesn't have a password. They have also granted the account 'log on as a service' permission. I also tried to change the 'Log On as' for the arcgis server service to this account but the service would not start. How can I configure arcgis server to use a group managed service account? Thank you!

0 Kudos
13 Replies
Scott_Tansley
MVP Regular Contributor

If the server (host machine) is registered by your SAs in the gMSA then it will just work.  There is no configuration on the ArcGIS Server side.  It's simply just a case of entering the gMSA account details as stated.  All the configuration is completed by your sys admins.

If the command line is not working for you then try the GUI approach described here:  https://enterprise.arcgis.com/en/server/latest/get-started/windows/what-s-included-with-arcgis-serve...

 

Scott Tansley
https://www.linkedin.com/in/scotttansley/
MarceloMarques
Esri Regular Contributor

ArcGIS Server account—ArcGIS Server | Documentation for ArcGIS Enterprise

MarceloMarques_0-1708708272187.png

ServerConfigurationUtility.exe /username mydomain\enterprise-gmsa$ /writeconfig c:\temp\domainaccountconfig.xml

| Marcelo Marques | Esri Principal Product Engineer | Cloud & Database Administrator | OCP - Oracle Certified Professional | "In 1992, I embarked on my journey with Esri Technology, and since 1997, I have been working with ArcSDE Geodatabases, right from its initial release. Over the past 32 years, my passion for GIS has only grown stronger." | “ I do not fear computers. I fear the lack of them." Isaac Isimov |
0 Kudos
ShirleyYueLi
Emerging Contributor

Thank you! I used the configure arcgis server account GUI and command line tool but both got an error: no password specified. Is a password required? Our IT told me there is no password for this gmsa account. What should I ask our IT for?

0 Kudos
ShirleyYueLi
Emerging Contributor

Thank you! I used the configure arcgis server account GUI and command line tool but both got an error: no password specified. Our IT told me there is no password for this gmsa account. What configurations should sys admins do? Thank you!

0 Kudos
BillFox
MVP Frequent Contributor

can you share the info Scott and Marcelo provided directory to your IT team?

0 Kudos
MarceloMarques
Esri Regular Contributor

ArcGIS Server account—ArcGIS Server | Documentation for ArcGIS Enterprise

MarceloMarques_0-1708708272187.png

ServerConfigurationUtility.exe /username mydomain\enterprise-gmsa$ /writeconfig c:\temp\domainaccountconfig.xml

| Marcelo Marques | Esri Principal Product Engineer | Cloud & Database Administrator | OCP - Oracle Certified Professional | "In 1992, I embarked on my journey with Esri Technology, and since 1997, I have been working with ArcSDE Geodatabases, right from its initial release. Over the past 32 years, my passion for GIS has only grown stronger." | “ I do not fear computers. I fear the lack of them." Isaac Isimov |
0 Kudos
ShirleyYueLi
Emerging Contributor

I used this command ServerConfigurationUtility.exe /username mydomain\enterprise-gmsa$ /writeconfig c:\temp\domainaccountconfig.xml but got an error "invalid password specified for ..." Is there any configuration we missed for this account? IT has granted 'log on as service' permission for this account.

0 Kudos
MarceloMarques
Esri Regular Contributor

@ShirleyYueLi - your gMSA domain account might not have been configured correctly.

Getting Started with Group Managed Service Accounts | Microsoft Learn

| Marcelo Marques | Esri Principal Product Engineer | Cloud & Database Administrator | OCP - Oracle Certified Professional | "In 1992, I embarked on my journey with Esri Technology, and since 1997, I have been working with ArcSDE Geodatabases, right from its initial release. Over the past 32 years, my passion for GIS has only grown stronger." | “ I do not fear computers. I fear the lack of them." Isaac Isimov |
0 Kudos