Enable Delegated Managed Service Account logons

Supported on: At least Windows 11 Version 24H2

Registry

HKLM Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters

Value name: DelegatedMSAEnabled

Enabled: DelegatedMSAEnabled = 1

Disabled: DelegatedMSAEnabled = 0

Options

DmsaRealms multiText

Description

This policy setting enables or disables delegated managed service account logons for this machine. If you enable this policy setting, delegated managed service account logons will be supported by the Kerberos client. Note that this policy has certain prerequites. The prerequisites and the directions to create a new delegated managed service account can be found at https://go.microsoft.com/fwlink/?linkid=2250379. If you disable or do not configure this policy setting, delegated managed service account logons will not be supported.