Install-ADServiceAccount fails with 0xC0000022

[Ryker]

hello,
i am trying to install the AD managed service account over the member server along with the install of Install-ADServiceAccount, the account which is created is in the ad but i do not why it remains in managed service accounts,the account is of the 12 characters and created on the same server,but the ad service account is not possible to be installed, by giving the error of 0xC0000022, so please any let me know why it is so which user rights and permissions do i need.

[Hardwareman]

The issue about the installation of the ad service account over the member server, and you are getting the error of 0xC0000022, i feel that the problem might last with the register,as the ad service account consists of the register/change SPN operation, where the SPN operations requires Domain Administrator permissions or delegation,the right permissions which you require for the domain users and managed service accounts.

[Shen]

The problem which you require to get the right permissions for installations of ADserviceAccounts, you may be recommended to configure the permissions by in the managed service accounts, the only requirement which you have provide is the reset password and right account restrictions, the commands are needed for the modification of managed service accounts dsacls.exe "CN=SVC-SQL1,CN=Managed Service Accounts,DC=mydomain,DC=com" /G "MYDOMAIN\SQL1-Admin:WP;Account Restrictions"
dsacls.exe "CN=SVC-SQL1,CN=Managed Service Accounts,DC=mydomain,DC=com" /G "MYDOMAIN\SQL1-Admin:CA;Reset Password"

[Killen]

Since the problem installing the ADServiceAccount which you are facing is the similar kind of problem which is faced by me,i am even unaware of the required rights and permisions which are required for its insatallations,i have the account on the member server, and the account is the member of domain users and the local administrators.