Version

Argent Job Scheduler 10.0-2107-A and above

Date

Thursday, 24 June 2021

Summary

The new option Run Jobs Using Argent Queue Engine Service Account is introduced to enable the user to execute the Jobs under a gMSA account when Argent Queue Engine is installed under gMSA account.

If this option is selected, the Jobs will run under the same gMSA account in which the Argent Queue Engine service is installed.

If a user changes the service account, then Jobs will run under the new service account.

The following screens show how the option Run Jobs Using Argent Queue Engine Service Account appears in the Argent Queue Engine GUI

When this option is selected, Argent Queue Engine will execute Jobs under the service account

Click For Full Size

When this option is not selected, Argent Queue Engine will execute Jobs under the specified account

Click For Full Size

Technical Background

When Argent Queue Engine is installed using gMSA account, there is no way in the existing Argent Queue Engine to know the gMSA account details which is internally managed by the Operating System.

The new option Run Jobs Using Argent Queue Engine Service Account instructs the Queue Engine to execute Jobs under the current service account under which the Argent Queue Engine service runs.

This makes the user capable of running Jobs under a gMSA account when Argent Queue Engine is installed using gMSA account.

Argent Queue Engine GUI can connect to multiple Queue Engine servers and select/deselect the option Run Jobs Using Argent Queue Engine Service Account for each server individually.

In case for jobs that needs to use an account to launch a GUI program, customers won’t need to use a gMSA account.

For these rare jobs, customers can use a non-domain admin local account using the existing features in Argent Job Scheduler.

Resolution

Upgrade to Argent Job Scheduler 10.0-2107-A or above