Finance | Project Operations, Human Resources, ...

Unable to resolve "New-ADServiceAccount: The specified account already exists"

(0) Share

Report

Posted on by Squash1986

Hello all,

I don't know if this is the right forum to post this question, I have to post it all the same to get the opinion of others in this challenge I'm encountering.

I created a group managed service account (GMSA as ADUsers) or rather thought I created them. However I found out that each time I ran the Install-ADServiceAccount svc-FRAS, It tells me it can't install ADServiceAccount. When I run the Test-ADServiceAccount, it comes out as false.

Now I removed those users, and created new ADComputer. When I run the New-ADServiceAccount -Name $gMSA_Name -DNSHostName $gMSA_FQDN -PrincipalsAllowedToRetrieveManagedPassword $gMSA_HostsGroup, it tells me that "The specified account already exists" I don't know how to resolve this, and I can't move forward with my installation of finance and operation without creating group managed service account.

I will be grateful if someone can advise me on how to resolve this. If this is not the right forum to post this question, please kindly direct me on which forum I should post this question to.

Thank you.

I have the same question (0)

All responses (5)

Answers (0)

Suggested answer

A.Prasanna 8,223 on at

Like (0)

Report

Bit confusing, however, if you are completed parameters configtemplate.xml properly then run below in PowerShell to Create GSMA accounts

Import-Module .\D365FO-OP\D365FO-OP.psd1

New-D365FOGMSAAccounts -ConfigurationFilePath .\ConfigTemplate.xml

Was this reply helpful? Yes No
Squash1986 45 on at

Like (0)

Report

Yes I am talking about D365FO. Yes that was the command I ran which made me suspect that I probably didn't configure the gMSA properly. I tested the ADServiceAccount, and it came out false.

I then removed gMSAs with the Remove-ADServiceAccount $gMSA_Name, and when I tried configuring the gMSAs again, but this time around as ADComputer rather than ADUser, I got this errors, and have been stuck there.

Was this reply helpful? Yes No
Squash1986 45 on at

Like (0)

Report

I ran your commands, and this is what I got. I also attached a copy of my configtemplate.xml.

I want to ask. Do I create the gMSA accounts as Users or as Computers in my active directory?

Thanks for your help.

Was this reply helpful? Yes No
Suggested answer

A.Prasanna 8,223 on at

Like (0)

Report

you don't need to create those accounts manually script will do.

Follow the instruction carefully given in the below links

1.www.linkedin.com/.../
2.https://docs.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/deployment/setup-deploy-on-premises-pu12

Was this reply helpful? Yes No
Suggested answer

A.Prasanna 8,223 on at

Like (0)

Report

also, make sure you run Powershell as an administrator,

Refer this to sort out MSA acccount issues as first step :

docs.microsoft.com/.../setup-deploy-on-premises-pu12

Was this reply helpful? Yes No