Exam 70-412 topic 3 question 133 discussion

Answer is D - Uninstall-ADServiceAccount The Reset-ADServiceAccountPassword - Is not supported for group managed service accounts as asked in the question. https://docs.microsoft.com/en-us/powershell/module/addsadministration/Reset-ADServiceAccountPassword?view=win10-ps

This question and 2 or 3 of the last few questions before this one were on 70-411. The answer to this one was: D - Uninstall-ADServiceAccount. This way if you uninstall locally from the server, rather than removing from AD, the account will still exist for the other servers to continue using.

I believe the correct answer is "D", The question is: "You need to remove the cached password of the Service01 service account from Server01" and Service01 is a group Managed Service Account. - The Reset-ADServiceAccountPassword cmdlet resets the password for the standalone managed service account (MSA) on the local computer. You must run this cmdlet on the computer where the standalone MSA is installed. Reset is not supported for group managed service accounts. https://docs.microsoft.com/en-us/powershell/module/addsadministration/Reset-ADServiceAccountPassword?view=win10-ps - The Uninstall-ADServiceAccount cmdlet removes an Active Directory standalone managed service account (MSA) on the computer on which the cmdlet is run. For group MSAs, the cmdlet removes the group MSA from the cache. However, if a service is still using the group MSA and the host has permission to retrieve the password, then a new cache entry is created. The specified MSA must be installed on the computer. https://docs.microsoft.com/en-us/powershell/module/addsadministration/uninstall-adserviceaccount?view=win10-ps