This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Remove From My Forums

Change ADFS Service Account to Managed Group Account

Question
0

Sign in to vote

I plan to migrate ADFS v2 to v3 by pretty much using this migration plan: https://blogs.technet.microsoft.com/canitpro/2015/02/17/step-by-step-migrating-ad-fs-2-0-to-ad-fs-3-0-for-office365-single-sign-on/

At some point during the project I would like to move away from the standard (service) account that is currently configured in v2 to a Group Managed Service Account for v3. My Forest meets the requirements. I just need a little guidance on the change over. Presumably, I would do the migration and use the v2 account of v3 and then do the account change. I just can't find any reference to where/how you change the account and account type in v3.

Thanks in advance

Darryl

Friday, September 23, 2016 4:30 PM

Answers

1

Sign in to vote
After your successful migration (using the same account), you can change the account using this script: Active Directory Federation Services: Change the Service Account https://gallery.technet.microsoft.com/scriptcenter/Active-Directory-ddb67df0
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.
- Proposed as answer by Pierre Audonnet [MSFT]Microsoft employee Sunday, September 25, 2016 2:56 AM
- Marked as answer by idarryl Sunday, September 25, 2016 5:27 AM
Friday, September 23, 2016 7:01 PM

All replies

1

Sign in to vote
After your successful migration (using the same account), you can change the account using this script: Active Directory Federation Services: Change the Service Account https://gallery.technet.microsoft.com/scriptcenter/Active-Directory-ddb67df0
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.
- Proposed as answer by Pierre Audonnet [MSFT]Microsoft employee Sunday, September 25, 2016 2:56 AM
- Marked as answer by idarryl Sunday, September 25, 2016 5:27 AM
Friday, September 23, 2016 7:01 PM
0

Sign in to vote

Thanks a lot. I feel a little silly that my searching didn't find that!

Sunday, September 25, 2016 5:27 AM