Start a new topic

Worker account - gMSA

 Have anyone been successful in using a gMSA (group managed service account) for the worker account. The other question is, the Royal Server service is the same as the worker account or are they different components?

1 Comment

Hi there,


Royal Server needs a valid Worker Account with the following properties to work:

  • it is able to log on (e.g. you don't need to change the password at next logon because of a policy)
  • it is in the local administrators group and
  • it has the right to log on as a batch job (which is new to V4). If the user is local administrator, it includes the logon type as batch by default. You can check if this account has the permission in the Group Policy Editor (gpedit.msc) under: Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment under "Log on as batch job". This right is typically included in the membership of the local Administrators group, but might be changed by a domain group policy.
  • additionally, if domain users or domain groups are used, the worker account must be a domain user, in order to be allowed to query the domain controller


More information ca be found here:

https://docs.royalapps.com/r2023/royalserver/getting-started/setting-the-worker-account.html#setting-a-worker-account


If you need any further assistance, feel free to open a ticket here:

https://www.royalapps.com/go/support-ticket-new


Best regards,

Christoph


Login or Signup to post a comment