GPOAdmin GPMC Extension stopped working after configuring GMSA (4382928)

Return

Feedback Submitted

Did this article solve an issue for you?

Select Rating

Title

GPOAdmin GPMC Extension stopped working after configuring GMSA
Description

Error with GPOADmin GPMC Extension after migrating from a standard service account to a gMSA account. GPOAdmin GPMC Extension fails to load with the error "A call to SSPI failed, see inner exception" since we migrated GPOAdmin from using a standard service account to a GMSA account.
Resolution

HTTP SPN entries were missing for the GPOAdin server.

Adding the corresponding entries fixes the issue

# Register SPN for the HTTP service on the application server (short hostname)

setspn -A HTTP/app-server-01 domain.local\app-server-01$

# Register SPN for the HTTP service on the application server (FQDN)

setspn -A HTTP/app-server-01.domain.local domain.local\app-server-01$

Feedback Submitted

Did this article solve an issue for you?

Select Rating

Title