Return
-
Title
Can Recovery Manager for AD make use of Microsoft Managed Service Accounts? -
Description
Does Recovery Manager for Active Directory support usage of Microsoft Managed Service Accounts? -
Resolution
Managed Service Accounts (MSA) can be specified for the account on the Schedule tab of the backup collection.
MSA requirements:- You can use MSA accounts only if you work with Windows Server 2012 or higher
- Add the '$' character at the end of the account name (e.g. domain\computername$) and leave the Password field blank
- The MSA account must be a member of the local Administrator group on the Recovery Manager for Active Directory machine
The Recovery Manager Portal can also be run under the Managed Service Account (MSA). During the Recovery Manager Portal installation, specify the MSA on the Web Site Settings step of the wizard (eg. domain\msaaccountname$ with a blank password). The Portal only supports Windows Authentication to access the SQL Server databases. -
Additional Information
Service Account Step-by-Step Guide - https://technet.microsoft.com/en-us/library/dd548356(WS.10).aspx Managed Service Accounts - https://technet.microsoft.com/en-us/library/dd378925(WS.10).aspx