Change passwords used for administration accounts (Windows SharePoint Services)

  • Article

Applies To: Windows SharePoint Services 3.0

 

Topic Last Modified: 2007-04-13

Use this task to change the password information for several features, services, and Web applications in Windows SharePoint Services 3.0. Domain policies often require that domain account passwords be updated periodically. This change provides additional security in case one of the passwords might have been compromised. Because you can configure the various features, services, and Web applications of Windows SharePoint Services 3.0 to run as a domain account, the passwords for these accounts must be updated for these features, services, and Web applications to continue to function properly.

Important

If the service, feature, or web application pool is running as a built-in account, such as Network Service, the password does not expire and therefore will not need to be updated.
The passwords will need to be updated only if they are running under a domain account and domain policies require passwords to be expired.

The password information for the following will have to be updated after the passwords have been changed in the domain controller:

  • SQL Server (MSSQLSERVER) service

  • SQL Server Agent (MSSQLSERVER) service

  • SQL Server Full Text Search (MSSQLSERVER) service [optional]

  • SharePoint Central Administration Web application pool

  • Windows SharePoint Services Search service

  • The default access account

  • Windows SharePoint Services Timer service

  • Application pool identity for all Web applications used by Windows SharePoint Services 3.0

Task Requirements

The following tasks are required to perform the procedures for this task:

  • Some of these procedures require that a Web application or Windows service be restarted. This might cause services or content to be momentarily unavailable to users. Each procedure will give the details of what must be restarted and the possible affects to users.

  • Some of these procedures require membership in the Administrators group on the local computer. Other procedures require only membership in the Farm Administrators group (WSS_RESTRICTED_WPG Windows security group). Each procedure will give details of what level of access is required to perform the procedure.

  • These procedures can only be performed after the password has been changed on the domain controller. The credentials entered are checked against those on the domain controller. If you enter the new password before the password has been changed on the domain controller, an error will result and the settings will not be changed.

To change the passwords, perform the following procedures: