As part of the 7.4 deployment I've been looking at using a GMSA to run the service, and had hoped to use it also for all actions, however there are issues with Exchange remote management shell. As such, I've been looking at an overwrite account for the domain, with limited delegation.
The thought crossed my mind, is it possible to update the overwrite account's password, and in turn update the edsaStoredAccountPassword value on each managed domain automatically.
I cannot find any documentation, so though i'd ask here. Can it be done ? is it a simple case of pushing the attribute through -objectattributes with the clear text password ?