Can i able to logon to domain from windows container?

Yes, it is possible to connect a Windows container to Active Directory (AD) using group Managed Service Accounts (gMSA). A gMSA is a domain account that can be used to manage services on multiple servers. The password for the gMSA is managed automatically by the domain controller, so it doesn't need to be stored in plain text on the server running the container. Here are the general steps to configure a Windows container to use a gMSA: Create a gMSA in the Active Directory domain that the container host is joined to. This can be done using the New-ADServiceAccount PowerShell cmdlet. Grant the necessary permissions to the gMSA to access resources in the domain. For example, if the gMSA needs to access a shared folder, you would need to grant the gMSA access to that folder. Install the gMSA on the container host by running the Install-ADServiceAccount PowerShell cmdlet. Configure the container to use the gMSA by adding the --security-opt "credentialspec=file://path/to/credential-spec.json" option to the docker run command. The credential-spec.json file should contain the following JSON:

{
    "Credentialspec": {
        "Username": "DOMAIN\\gMSA$",
        "Password": ""
    }
}

Replace DOMAIN with the name of your Active Directory domain, and gMSA with the name of your gMSA. Leave the Password field blank. Test the connection to the AD domain from within the container using the Test-ComputerSecureChannel PowerShell cmdlet. Note that gMSA is only available on Windows Server 2016 and later versions. Also, the container host must be joined to an Active Directory domain. I hope this helps. Let me know if you have any further questions!

Hi Susheel Bhatt, Thanks for the detailed answer. So, we cannot connect domain from windows container without using gMSA? Thanks, Suresh Rajamani