MCITP 70-640: Managed Service Accounts

[@itfreetraining]

Glad to hear that you like the videos. I have updated the playlist to include this video.

[@itfreetraining]

MSA is like a user account. You could enable auditing on your Domain Controller and audit which services it is being used on. This would not tell you what application it was being used with, so you would need to next work out which applications are running on that server. There is no easy way that I know of to do it. Glad to hear that you like the video.

[@emaayan]

can it be used to interact with the desktop uI?

[@mradios]

Thanks again - Watched the video and did follow the steps, all the steps worked with out any issue except the last command: "PS C:\Users\administrator> Install-ADServiceAccount -identity managedIISService Warnning Error: Install-ADServiceAccount : Cannot install service account. Error Message: 'Unknown error (0xc0000017)'. Google the error and find a note reffering to use only 15 max letter for MSA name, reduced the "managedIISService (17 letter) to "magedIISService" and did worked.

[@itfreetraining]

For a list of all the videos in the course that are currently released have a look at are web site. The link for the web site is in the description of the video.

[@zukini3]

First of all - thanks! Your videos have been helping me out a lot. Secondly - just letting you know that this video is missing from the 70-640 playlist. Service Accounts skips straight to Offline Domain Join. Again, thanks!

[@itfreetraining]

You could use a domain account or a local account for the service account. We used a domain account to show the viewer how to remove the default permissions on a domain account, but using a local account is fine as well. The difference with MSA and local. Domain accounts have better security. MSA passwords are automatically changed. MSA passwords uses max number of characters and is random. Local account should work with all applications while MSA is limited.

[@itfreetraining]

We will being videos for the MCSA 2012. Depending how long these take we may do videos for the MCSE course as well.

[@itfreetraining]

Thanks, glad you liked the video.

[@itfreetraining]

The video was made for Windows Server 2008 R2 so that is why SQL server 2012 is not mentioned. I am sure Microsoft have made some improvements since the video was created.

[@itfreetraining]

Thanks very much. Not sure when we will upload more IIS videos.

[@itfreetraining]

I have fixed the link. Thanks for letting us know.

[@HestnetIT]

Also doesn't hurt to add -RestrictToSingleComputer when creating the new service account.

[@itfreetraining]

I would assume that would be the pre-Windows 2000 name causing the problem. You should be able to create the account and rename it afterwards to use a longer name.

[@Annymosse]

Hi, thank u for ur free training videos and it is really helpful for me... I would request you to upload the video for IIS as soon as possible...

[@itfreetraining]

Not at this stage. We are focusing on the MCSA videos currently.

[@itfreetraining]

I afraid not. Windows Server 2008 R2 only comes in the 64bit edition.

[@ethernetarchitect]

Will you be doing more series on MCSA and MCSE for Server 2012? I look forward to more great videos!

[@mradios]

Many thanks in advance, excellent video for MSA and PowerShell AD command. Is there anyway to track which MSA is used for which Application\Service in AD Domain ?

[@Intellabase]

SQL Server 2012 and Managed Service Accounts are supported however, DBAs you can use them. Google Managed Service Accounts with Microsoft SQL Server 2012 Thanks, Hugo SQL MVP (back in 2010 after three nominations)

[@2Fast4Mellow]

So if I understand correctly, I cannot use Managed Services accounts in a load balanced IIS configuration where the IIS schema config is shared between servers?

[@dreamtheater_92]

Any updates for Windows Server 2016? I just tried this on my test domain, creating "IISMSA" and when I set the app pool identity to MYDOMAIN\IISMSA$ (no password) I get this error: "Application pool IISMSAAppPool has been disabled. Windows Process Activation Service (WAS) did not create a worker process to serve the application pool because the application pool identity is invalid."

[@binaryblog]

Thanks for the great video!

[@itfreetraining]

You're very welcome

[@antolintxit]

high quality videos, for sure.

[@8313978]

is it part one of MCITP Courses ? give me part one Link please if it is not Part one , thanks

[@zukini3]

(also - the built in link at the end of Service Accounts does not work)

[@sanjaykmr2]

how to enable delegation for an MSA Account in win 2012 r2 server.

[@sanjaykmr2]

it's urgent please

[@itfreetraining]

Take a look at this article: technet.microsoft.com/en-us/library/dd548356(v=ws.10).aspx

[@Annymosse]

And also need to know is there any way of installing Server 2008 R2 on 32 bit systems... need help as ur a MASTER.... ;)

[@yasithaperera8303]

Thank you

[@itfreetraining]

You're welcome

[@neilmarsiful]

you rock!!!!