<div>
You need to use the service account's sAMAccountName, not its AD name; it will end with a $, because a service account is essentially a computer account. 
The SAM is in all likelihood just gMSA_SVC-P$, but you can run this to verify: 

<pre><code id="code-20-43566466-1">Get-ADServiceAccount -Filter &quot;Name -eq 'gMSA_SVC-P'&quot;</code></pre>
</div>

<div>
You're right, now there is no error code, but the acl s not set. Its like the hook to set, when you try to choose the account. You have first to check the square "service accounts"
</div>

Sysadmin

Tim Kristof

<div>
<div class="content wysiwyg-content fr-view">
I want to give accessrights to am gmsa via Powershell. I know how it works with a regular domain account, but this dosent work with a group managed service account.This is an Excample of my try:$rootfolder="C:\Admin"$username="gMSA_Excample$"$permission="FullControl"$Folders = (Get-ChildItem -Directory $RootFolder -Recurse).FullName foreach ($folder in $Folders){$Acl = Get-Acl $folder$Ar = New-Object &nbsp;system.security.accesscontrol.filesystemaccessrule($username,$permission,'ContainerInherit,ObjectInherit', 'None', 'Allow')$Acl.SetAccessRule($Ar)Set-Acl $folder $Acl} 
</div>
</div>


I want to give accessrights to am gmsa via Powershell. I know how it works with a regular domain account, but this dosent work with a group managed service account.
This is an Excample of my try:
$rootfolder="C:\Admin"
$username="gMSA_Excample$"
$permission="FullControl"
$Folders = (Get-ChildItem -Directory $RootFolder -Recurse).FullName
foreach ($folder in $Folders)
{
$Acl = Get-Acl $folder
$Ar = New-Object  system.security.accesscontrol.filesystemaccessrule($username,$permission,'ContainerInherit,ObjectInherit', 'None', 'Allow')
$Acl.SetAccessRule($Ar)
Set-Acl $folder $Acl
}

You need to use the service account&amp;#39;s sAMAccountName, not its AD name; it will end with a $, because a service account is essentially a computer account.
The SAM is in all likelihood just gMSA_SVC-P$, but you can run this to verify: 
(CODE)


You&amp;#39;re right, now there is no error code, but the acl s not set. Its like the hook to set, when you try to choose the account. You have first to check the square &amp;quot;service accounts&amp;quot;

ACL Settings for a Managed Service Account


I want to give accessrights to am gmsa via Powershell. I know how it works with a regular domain account, but this dosent work with a group managed service account.
This is an Excample of my try:
$rootfolder=&amp;quot;C:\Admin&amp;quot;
$username=&amp;quot;gMSA_Excample$&amp;quot;
$permission=&amp;quot;FullControl&amp;quot;
$Folders = (Get-ChildItem -Directory $RootFolder -Recurse).FullName
foreach ($folder in $Folders)
{
$Acl = Get-Acl $folder
$Ar = New-Object  system.security.accesscontrol.filesystemaccessrule($username,$permission,&amp;#39;ContainerInherit,ObjectInherit&amp;#39;, &amp;#39;None&amp;#39;, &amp;#39;Allow&amp;#39;)
$Acl.SetAccessRule($Ar)
Set-Acl $folder $Acl
}

Windows PowerShell is a task automation and configuration management framework from Microsoft, consisting of a command-line shell and associated scripting language built on the .NET Framework. PowerShell provides full access to the Component Object Model (COM) and Windows Management Instrumentation (WMI), enabling administrators to perform administrative tasks on both local and remote Windows systems as well as WS-Management and Common Information Model (CIM) enabling management of remote Linux systems and network devices.

Powershell

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.