title: add-kdsrootkey error the request is not supported
body: <p>I am trying to create a Group Managed Service Account. So we have promoted our Windows Server 2016 VM to Domain Controller. The object version of the schema is 87. Now I am trying to create a <code>KdsRootKey</code> that's giving me an error that "The request is not supported". I have logged in as a domain administrator.Please help.</p>