Windows Server 2012 R2 – Running Commands with Managed Service Accounts

managed-service-accountswindowswindows-server-2012-r2

I've just granted permissions for a MSA (Managed Service Account) to some resources.

Can I verify it works, by running a cmd.exe process with the credentials of the MSA account, and check I have the proper permissions?

Possible with Sysinternals' PsExec Tool, with a blank password.

Command example:

PsExec.exe -u domain\MsaAccount$ cmd.exe

A little known one is

getmac

It shows the MAC address(es) of your network adapter(s).

Screenshot of running getmac from a Windows commandline window.

Look at the Active-Directory attributes of the MSA. Specifically pwdLastSet, which tells you when the password has been last changed.