Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Question
Wednesday, April 12, 2017 5:51 PM
Hi, I need to update farm account and all service accounts password in SharePoint 2010/2013.
1. I will update password first in AD and then under central admin and then managed account change password.
2. Do I still have to use following command: "stsadm –o updatefarmcredentials –userlogin DOMAIN\farmaccount –password $password$" please guide?
3. For farm account password update should I go via central admin and then managed account Or use below command:Set-SPManagedAccount -Identity "domain\farmaccount" -ExistingPassword "srv-password".
Please guide.
All replies (6)
Thursday, April 13, 2017 6:37 AM
Please refer to the following links.
http://blogs.technet.com/b/seanearp/archive/2011/01/25/updating-passwords-on-sharepoint-2010.aspx
Friday, April 14, 2017 12:55 PM | 1 vote
First of all, It's heavily recommended to do this process in a test environment and monitor the test farm behavior before performing this process in a production environment, If you didn't have a test environment. , you should apply this process out working hour in production.
Second Try to list all application services, application pool, windows service and SQL services that running via Farm account and make sure it's working and up running after changing the password.
Steps to change Farm account password:
Via PowerShell
By default, the farm account is the default app pool account that running the central administration application pool, so in this case, you will need to apply this process via PowerShell:
If you have already changed the user in AD, use this command
Set-SPManagedAccount -Identity $username -ExistingPassword $newpassword -UseExistingPassword:$true
If you didn't change the account password in AD,
Set-SPManagedAccount -Identity $username -NewPassword $newpassword -ConfirmPassword $newpassword
Via Central administration
By dint of the Managed account, you can change the password of farm account via central administration without changing its password via Active Directory by doing the following:
- Navigate to SharePoint Central Administration,
- Click Security > and click ‘Configure Managed Accounts’.
- Select the farm account, click the Edit icon > check change the password.
- Check set account password to a new value > provide the new password. if you have already changed the user in AD use the Use Existing password.
You might also like to read SharePoint 2019: Service Accounts Recommendations
Monday, April 17, 2017 12:50 PM
Hi M.Qassas/Shelley,
I am using different managed account for farm, web app pool, search service app pool etc.
I tried to first on test farm and i reset all account passwords in AD at a time and during password update in SharePoint via powershell/CA I found one issue that app pool and search service account get frequently locked out in AD.
Wednesday, April 19, 2017 7:06 PM
If they are getting locked out, the changed password was most likely missed somewhere. You can get the account lockout source from a domain controller's security log.
Friday, April 21, 2017 10:17 AM
Hi,
Can I stop IIS on all SharePoint servers (APP/WFE) and then use power shell command to change password?
Please suggest.
Wednesday, April 26, 2017 6:45 AM
Hi Prakash,
The reply from M.Qassas and the links from Shelley include the detailed and correct steps for change the password for farm and service accounts.
You don’t need to stop IIS on all server per my knowledge.
As for the account locked out in AD, I suggest you checking the log or use “Account Lockout and Management Tools” to troubleshoot account lockouts to check what causes this issue.
Best regards,
Grace Wang
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected]