Group Managed Service Accounts (gMSAs) provide a higher security option for non-interactive applications/services/processes/tasks that run automatically but need a security credential. The group Managed Service Account (gMSA) provides the same functionality within the domain but also extends that functionality over multiple. Step-by-Step: How to work with Group Managed Service Accounts (gMSA). gmsa1 is the name of the gMSA account to be created. Having long, complex, and self generated passwords makes the accounts more secure. When gMSA required a password, windows server 2012 domain controller will be generated password based on common algorithm which includes root key ID.