Managed Service Account Troubleshooting: gMSA, dMSA, KDS Root Key & BadSuccessor Fixes (2026)
A service desk playbook for gMSA and dMSA failures on Windows Server 2025: KDS root key setup, Test-ADServiceAccount False, Kerberos encryption mismatch, dMSA migration flow, and BadSuccessor mitigation.