Service Account Functions

Get-DomainGMSA

Description

Query for Group Managed Service Accounts (gMSA) and retrieve their password blobs.

Aliases

PV > Get-GMSA

Syntax

PV > Get-DomainGMSA
-Count         -Identity      -LDAPFilter    -NoCache       -NoVulnCheck   -NoWrap        -OutFile       -Properties    -Raw           -SearchBase    -Select        -Server        -SortBy        -TableView     -Where

Examples

PV > Get-DomainGMSA
PV > Get-DomainGMSA -Identity gmsaaccount

Parameters

# With Argument
-Identity =
-Properties =
-LDAPFilter =
-SearchBase =
-Server =
-Select =
-Where =
-SortBy =
-OutFile =

# No Argument
-TableView
-Count
-NoWrap
-NoCache
-NoVulnCheck
-Raw

Add-DomainGMSA

Description

Create a new Group Managed Service Account (gMSA) in the domain.

Aliases

PV > Add-GMSA

Syntax

PV > Add-DomainGMSA
-BaseDN        -DNSHostName   -Identity      -NoWrap        -OutFile       -PrincipalsAllowedToRetrieveManagedPassword -Server

Examples

PV > Add-DomainGMSA -Identity newgmsa -PrincipalsAllowedToRetrieveManagedPassword "Domain Admins"

Parameters

# With Argument
-Identity = (required)
-PrincipalsAllowedToRetrieveManagedPassword =
-DNSHostName =
-BaseDN =
-Server =
-OutFile =

# No Argument
-NoWrap

Remove-DomainGMSA

Description

Delete an existing Group Managed Service Account from the domain.

Aliases

PV > Remove-GMSA

Syntax

PV > Remove-DomainGMSA
-Identity      -OutFile       -SearchBase    -Server

Examples

PV > Remove-DomainGMSA -Identity oldgmsa

Parameters

# With Argument
-Identity = (required)
-SearchBase =
-Server =
-OutFile =

# No Argument

Get-DomainDMSA

Description

Query for Delegated Managed Service Accounts (dMSA).

Aliases

PV > Get-DMSA

Syntax

PV > Get-DomainDMSA
-Count         -Identity      -LDAPFilter    -NoCache       -NoVulnCheck   -NoWrap        -OutFile       -Properties    -Raw           -SearchBase    -Select        -Server        -SortBy        -TableView     -Where

Examples

PV > Get-DomainDMSA
PV > Get-DomainDMSA -Identity dmsaaccount

Parameters

# With Argument
-Identity =
-Properties =
-LDAPFilter =
-SearchBase =
-Server =
-Select =
-Where =
-SortBy =
-OutFile =

# No Argument
-TableView
-Count
-NoWrap
-NoCache
-NoVulnCheck
-Raw

Add-DomainDMSA

Description

Create a new Delegated Managed Service Account (dMSA) in the domain.

Aliases

PV > Add-DMSA

Syntax

PV > Add-DomainDMSA
-BaseDN        -DNSHostName   -Hidden        -Identity      -NoWrap        -OutFile       -PrincipalsAllowedToRetrieveManagedPassword -Server        -SupersededAccount

Examples

PV > Add-DomainDMSA -Identity newdmsa
PV > Add-DomainDMSA -Identity newdmsa -SupersededAccount victimuser

Parameters

# With Argument
-Identity = (required)
-SupersededAccount =
-PrincipalsAllowedToRetrieveManagedPassword =
-DNSHostName =
-BaseDN =
-Server =
-OutFile =

# No Argument
-Hidden
-NoWrap

Remove-DomainDMSA

Description

Delete an existing Delegated Managed Service Account from the domain.

Aliases

PV > Remove-DMSA

Syntax

PV > Remove-DomainDMSA
-Identity      -OutFile       -SearchBase    -Server

Examples

PV > Remove-DomainDMSA -Identity olddmsa

Parameters

# With Argument
-Identity = (required)
-SearchBase =
-Server =
-OutFile =

# No Argument