ADFS is already setup in our environment and we would like to add another server for redundancy. From what I have read you can use a gMSA service account or domain user. We are not running any Windows 2012 R2 DC's yet but is there any downsides of using the domain user account now then changing it later on. Also but services in the farm will be able to sync their configs correct? We have a lot of claim rules and would had to recreate them. Some of my coworkers think this will only work with a gMSA which I believe to be incorrect?