SQL Server Always On gMSA Account

Domain Controller : Add-KdsRootKey -EffectiveTime ((Get-Date).AddHours(-10)) Get-KdsRootKey dsacls (Get-ADServiceAccount -Identity gmsa_sqladmin).DistinguishedName /G "SELF:RPWP;servicePrincipalName" Get-ADServiceAccount gmsa_sqladmin -Properties * | FL DNSHostName,KerberosEncryptionType,SamAccountName Target Machines: Install-ADServiceAccount gmsa_sqladmin Test-ADServiceAccount gmsa_sqladmin