# Managing windows using an domain admin user

**URL:** <https://forum.ansible.com/t/managing-windows-using-an-domain-admin-user/18504>\
**Category:** Ansible Project\
**Tags:** windows\
**Created:** [June 15, 2015, 2:21pm UTC](https://forum.ansible.com/t/managing-windows-using-an-domain-admin-user/18504 "2015-06-15T14:21:39Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Michele\_Viviani](https://avatars.discourse-cdn.com/v4/letter/m/e5b9ba/32.png) [@Michele\_Viviani](https://forum.ansible.com/u/Michele_Viviani)\
**Post date:** [June 15, 2015, 2:21pm UTC](https://forum.ansible.com/t/managing-windows-using-an-domain-admin-user/18504/1 "2015-06-15T14:21:39Z")

</div>

Hi,  
I was able to setup ansible to manage a Windows host, following the docs and using the local admin user “Administrator”.  
All Windows are managed by AD and I would like to use a Service account that exists in all my Windows VM.

Which is the correct settings to put into the groups\_var\windows.yml file?

I’ve tried several combinations, with no luck.  
Here my file and the error I got

---

<div class="post-metadata">

**Author:** ![j.r.hawkesworth](https://avatars.discourse-cdn.com/v4/letter/j/a3d4f5/32.png) [@j.r.hawkesworth](https://forum.ansible.com/u/j.r.hawkesworth)\
**Post date:** [June 15, 2015, 10:05pm UTC](https://forum.ansible.com/t/managing-windows-using-an-domain-admin-user/18504/2 "2015-06-15T22:05:56Z")

</div>

Hello,

You need to use

username@FULL.DOMAIN.NAME

Also make sure you have installed kerberos and configured your ansible controller as a kerberos client.

Depending on how you set things up, you may need to acquire a kerberos ticket by running

kinit username@FULL.DOMAIN.NAME

before running your playbook.

You can test if you have got a kerberos ticket by running

klist

Hope this helps,

Jon