I am setting up a brand new SQL 2017 installation. I want to set up and use gMSA(s) for the Service Accounts. What are the best practices for SQL Server? Should I use individual gMSAs for each service? Should there be individual gMSAs for each server or instance or site?
I have read the following and several other articles and posts:
- Follow best practices described here: https://learn.microsoft.com/en-us/sql/sql-server/install/security-considerations-for-a-sql-server-installation?view=sql-server-2017
- Consider the use of Managed Service Accounts and Group Managed Service Accounts described here:
Any help that you can offer would be awesome.