Home / server / Questions / 1114571
Accepted
Shaamaan
Asked: 2022-11-02 11:37:53 +0800 CST

Docker container running gMSA whilst having admin permissions

  • 772

I'm trying to set up a Docker container for our DevOps pipelines. I've... almost got it all.

Right now I've got a Windows-based container which:

  1. has pre-installed SDKs, Java and the like
  2. can manipulate (start, stop, build) docker containers
  3. can access our network shares

The problem is that I can't get points 2) and 3) to be available simultaneously. To enable 3) I've had to prepare a group managed service account and the docker container needs to run as the NT AUTHORITY\NETWORK SERVICE. However, when the container IS running as NT AUTHORITY\NETWORK SERVICE it seems to lose access to the Docker pipeline.

Any idea how I can get both these things to work at the same time?

active-directory

1 Answers

  1. Best Answer

    Apparently NT AUTHORITY\NETWORK SERVICE isn't the only account that will work with gMSA - it can be another NT AUTHORITY account, such as NT AUTHORITY\SYSTEM (which does have permission to handle docker containers).

    • 1