Home Dashboard Directory Help
Search

gMSA for SQL Server Failover Clusters by adam.moericke


Status: 

Active


28
0
Sign in
to vote
Type: Suggestion
ID: 767211
Opened: 10/12/2012 9:37:02 AM
Access Restriction: Public
0
Workaround(s)
view

Description

I'd like to see gMSAs work on SQL Server Failover Clusters
Details
Sign in to post a comment.
Posted by Barry_Smith_CS on 4/1/2014 at 3:38 AM
Is the situation different with the release of SQL 2014?
Posted by Joey D'Antoni on 1/9/2013 at 11:58 AM
I have this working in a SQL 2012 Failover Cluster Instance in a test VM environment. However, when used with Availability Groups, the failover process throws two SSPI stack dumps, before failing over successfully.

Config is detailed here:

http://joedantoni.wordpress.com/2012/12/14/group-managed-service-accounts/
Posted by Microsoft on 11/19/2012 at 9:51 AM
Hi Adam,

Thank you for your feedback. Windows Server 2012 Group Managed Service Account is not currently supported as SQL 2012 released earlier than Windows Server 2012. We will consider to support gMSA in future SQL Server release.

Regards,
Min He, Program Manager, SQL Server
Posted by adam.moericke on 10/19/2012 at 10:58 AM
Group Managed Service Account:
http://blogs.technet.com/b/fmustafa/archive/2012/09/17/active-directory-domain-services-in-windows-server-2012-new-features.aspx
Group Managed Service Accounts (gMSA’s) (Source)
In Windows Server 2008 R2, everyone was pleased Microsoft introduced Managed Service Accounts (MSAs) to solve the security issues with domain service accounts. In Windows Server 2008 R2, however, clustered and load-balanced services could not be facilitated with MSAs. Services that spanned multiple servers required MSAs for each server. For these purposes, Microsoft introduces Group Managed Service Accounts (gMSAs) in Windows Server 8.

I'm told there's a bug in SQL 2012 though, and gMSAs do not work with clusters.
Posted by Sethu Srinivasan on 10/15/2012 at 8:59 AM
Hello Adam,
Could you please explain what does "gMSA" mean?. Are you looking for "Managed Service Accounts" support ?
http://technet.microsoft.com/en-us/library/ff641729(v=ws.10).aspx

Thanks
Sethu Srinivasan [MSFT]
SQL Server
Sign in to post a workaround.