I created a managed service account (not a gMSA) and installed it on a 2012 server with Install-ADServiceAccount.
Now I want to be able to check where my MSA are installed (throughout the domain)
Looking at the MSAs attributes I don't see the server name anywhere.
Looking at the server's attributes I see the service account under msDS-HostServiceAccount.
Would searching for the msDS-HostServiceAccount attribute of computer accounts be the correct way of keeping track of where MSAs are installed?
Best Answer
Using get-ADServiceAccount there is an attribute for hostComputers:
Ref: https://technet.microsoft.com/en-us/library/ee617204.aspx?f=255&MSPPError=-2147217396