group Managed Service Account (gMSA)
Also written: gMSA, gMSAs, managed service account
An AD service account whose long random password the domain controller creates and changes every 30 days. Only the servers you name may fetch it, and nobody types or sees it.