Setting up Directory Service Accounts and Managed Action Accounts with a gMSA
In the process of setting up Directory Service Accounts and Managed Action Accounts using a group Managed Service Account, it iss observed that the naming convention for a DSA requires the name string to end with a $
. However, there is no information regarding the naming convention for a Managed Action Account when using a gMSA. Does this imply that a gMSA can be utilized as an MAA without the need to append $
to the name string?
https://learn.microsoft.com/en-us/defender-for-identity/deploy/create-directory-service-account-gmsa#configure-a-directory-service-account-in-microsoft-defender-xdr. https://learn.microsoft.com/en-us/defender-for-identity/deploy/manage-action-accounts#add-the-gmsa-account-in-the-microsoft-defender-portal