How do I use a Group Managed Service Account with the Task Scheduler

[J Stangroome]

In Server 2008, Managed Service Accounts only worked with services, and only a single computer. In Server 2012, the new Group Managed Service Accounts apparently now work with IIS Application Pool and Scheduled Tasks too according to this TechNet documentation:

"
With Windows Server 2012, services or service administrators do not need to manage password synchronization between service instances when using group Managed Service Accounts (gMSA). You provision the gMSA in AD and then configure the service which supports Managed Service Accounts. You can provision a gMSA using the *-ADServiceAccount cmdlets which are part of the Active Directory module. Service identity configuration on the host is supported by:

• Same APIs as sMSA, so products which support sMSA will support gMSA
• Services which use Service Control Manager to configure logon identity
• Services which use the IIS manager for application pools to configure identity
• Tasks using Task Scheduler.

" - Getting Started with Group Managed Service Accounts

However, I cannot find a way to specify a Scheduled Task to run as a gMSA that I have created. I've tried both the taskschd.msc GUI and the schtasks command-line. Is there a trick to it or is the documentation incorrect?

Regards,

Jason

Continue reading...