Does the One Identity Manager support the Microsoft Windows Group Managed Service Account service for the One Identity account that runs the service? Same question for the Password Manager service account?

Did you ever try this or get any response about supportability? Also interested to know if you looked at having the IIS Pools run as gMSAs as well

I would also be interested if anyone has ever tried this

I have just implemented this in my development environment. Will post updates.

Today I hade a few errors with regards to gMSA. The first one was access rights to be able to create home directories for our users, easily fixed.

The second one was something about onprem Exchange. "The operation couldn't be performed because 'ACME\gMSA-identityManager$' couldn't be found."

But since we are in the process of removing our onprem Exchange, I didn't look into it much further.

Just realised that the old account is still the one doing the changes to AD and Exchange onprem..

Since the connection to both AD and Exchange onprem is done with username/passwords (although Exchange does give the option to use the service account instead) I think this will get difficult to fully implement, unless you don't have either AD and Exchange onprem.

thanks a lot for testing and providing feedback. This is very helpful information

If you receive any other information or encounter any other issues using gMSAs, it would be great if you post this here as well

Hi

We've done this. We are running One Identity Manager and One Identity Manager DGE services with gMSA.
We installed all the services and then change them manually from the services.

All has been working fine.

For DGE, you need to use the normal service account to reach the shares and install the service. Then, once the service is installed, you can change manually each DGE Agent service.