Share this article
Latest news
With KB5043178 to Release Preview Channel, Microsoft advises Windows 11 users to plug in when the battery is low
Copilot in Outlook will generate personalized themes for you to customize the app
Microsoft will raise the price of its 365 Suite to include AI capabilities
Death Stranding Director’s Cut is now Xbox X|S at a huge discount
Outlook will let users create custom account icons so they can tell their accounts apart easier
Windows Server Build 26212 introduces dMSA allowing organizations to migrate from traditional accounts to machine accounts
Build 26212 is now live!
2 min. read
Published onMay 8, 2024
published onMay 8, 2024
Share this article
Read our disclosure page to find out how can you help Windows Report sustain the editorial teamRead more
Microsoft released Build 26212 (the same version was released tothe Canary channel, as well) to Windows Server 2025, and with it, the Redmond-based tech giant finally introduced the long-speculated dMSA (Delegated Managed Service Accounts) capability.
For those of you who don’t know, the dMSA account type allows a safe and secure migration from a traditional service account to a machine account, by using fully randomized keys, while disabling account passwords.
Using dMSA can stop people from stealing credentials using a hacked account (a problem known as kerberoasting), which is a common problem with old-style service accounts, and one Microsoft intends to address, accordingto the official changelog.
[NEW]Delegated Managed Service Accounts (dMSA)
A new account type known as delegated Managed Service Account (dMSA) is now available that allows migration from a traditional service account to a machine account with managed and fully randomized keys, while disabling original service account passwords.
Authentication for dMSA is linked to the device identity, which means that only specified machine identities mapped in AD can access the account. Using dMSA helps to prevent harvesting credentials using a compromised account (kerberoasting), which is a common issue with traditional service accounts.
dMSA in Windows was initially noticed at the end of last year, and then, a few months later,Microsoft officially confirmed it. Now, it’s available to preview for Windows Servers insiders.
Alongside the new dMSA, Windows Server Build 26212 also introduced more SMB (Server Message Block) protocol changes, including:
You can read the full changeloghere, and you can download the latest Windows Server Build 26212here.
More about the topics:Windows 11,Windows Update
Flavius Floare
Tech Journalist
Flavius is a writer and a media content producer with a particular interest in technology, gaming, media, film and storytelling.
He’s always curious and ready to take on everything new in the tech world, covering Microsoft’s products on a daily basis. The passion for gaming and hardware feeds his journalistic approach, making him a great researcher and news writer that’s always ready to bring you the bleeding edge!
User forum
0 messages
Sort by:LatestOldestMost Votes
Comment*
Name*
Email*
Commenting as.Not you?
Save information for future comments
Comment
Δ
Flavius Floare
Tech Journalist
Flavius is a writer and a media content producer with a particular interest in technology, gaming, media, film and storytelling.