Control-M/Agent Support for Group Managed Service Account

1 December 2025

BMC is announcing that Control-M/Agent 9.0.22 and higher allows you to run jobs with a group Managed Service Account (gMSA) when you define a user as a member of a Local Administrative Group, as described in Windows Agent Service. This enables you to streamline the password update process for an account in a gMSA instead of locally on each endpoint. Users that are logged in to an Agent through a gMSA account cannot run and execute jobs on Agentless Hosts. To view an example of how to configure a gMSA account on a specific Windows Server version, see KA000263820. The configuration procedure must be adapted to the version installed at your site. For the complete set up and configuration instructions, see the relevant Microsoft documentation.