You have a group Managed Service Account named Service01. Three servers named Server01, Server02, andServer03 currently use the Service01 service account.
You plan to decommission Server01.
You need to remove the cached password of the Service01 service account from Server01. The solution must
ensure that Server02 and Server 03 continue to use Service01.
Which cmdlet should you run?
A.
Set-ADServiceAccount
B.
Remove-ADServiceAccount
C.
Uninstall-ADServiceAccount
D.
Reset-ADServiceAccountPassword
Explanation:
The Remove-ADServiceAccount cmdlet removes an Active Directory service account. This cmdlet does not
make changes to any computers that use the service account. After this operation, the service account is no
longer hosted on the target computer but still exists in the directory.
Incorrect:
Not C: The Uninstall-ADServiceAccount cmdlet removes an Active Directory service account on the computer
on which the cmdlet is run. The specified service account must be installed on the computer.
Remove-ADServiceAccount
https://technet.microsoft.com/en-us/library/ee617190.aspx
I would have said C :
https://technet.microsoft.com/en-us/library/jj128431(v=ws.11).aspx#BKMK_DecommMemberHosts
B
https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/ee617190(v=technet.10)
The Remove-ADServiceAccount cmdlet removes an Active Directory service account. This cmdlet does not make changes to any computers that use the service account. After this operation, the service account is no longer hosted on the target computer but still exists in the directory.
Answer is C. B would remove the MSA from AD thus preventing the other 2 systems from using the MSA.
https://docs.microsoft.com/en-us/powershell/module/addsadministration/uninstall-adserviceaccount?view=win10-ps