Hello,
Can group managed service accounts be used for the credentials for shared configuration? I've setup a gmsa on a fresh install of server 2012 and tested it via an app pool and it works fine but it refuses to co-operate when asking it to export the configuration to a file share (it has permissions to this). This seems a fairly useful candidate for gmsas (to me at least) as its one less account to have to manage?
setup is a lab enviroment (hence stuff on the DC, inc TFS), 1 DC vhost running 2x web servers (identical config via export roles) and 1 x sql server. all running server 2012. file share for iis is on the DC and is accessible from the web servers. run all the powershell for creating the key, installing and testing the gmsa on each host and everything from the various posts on the subject on msdn/technet.
says "Cannot write to the specified path, Make sure the Path and Credentials are valid"
using [domain]\[gmsa]$ and no password for the credentials
any ideas or is it something IIS8 cannot do or am i being dumb and trying to square peg / round hole the concept?
cheers
toby
edit: i've setup a task scheduler job via powershell using this account writing a file to that share and it did so without a problem, i hope that rules out permissions.