Identity with Windows Server 2016 — Question 181
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You deploy a new Active Directory forest.
You need to ensure that you can create a group Managed Service Account (gMSA) for multiple member servers.
Solution: From Windows PowerShell on a domain controller, you run the Set-KdsConfiguration cmdlet.
Does this meet the goal?
Answer options
- A. Yes
- B. No
Correct answer: B
Explanation
The correct answer is B because running the Set-KdsConfiguration cmdlet alone does not create a gMSA; it configures the Key Distribution Service (KDS) root key. To create a gMSA, additional steps must be taken, such as using the New-ADServiceAccount cmdlet after the KDS is configured.