|
Home > Archive > BizTalk Server General > April 2005 > Urgent Help!!! - Change Service account password
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
Urgent Help!!! - Change Service account password
|
|
| John Lee 2005-04-25, 8:47 pm |
| Hi,
Our Engineering group comes up an idea to change all service account
password every 90 days - It's crazy and it looks like I could not stop them.
My concern is that we use different domain account for our SSO, Sharepoint,
BTS and BTSSQL service account, what they wanted to do is to change the
password in AD and then go to each box/or use some purchased tool to change
the service account on each box - Will this action break the BizTalk Server?
Is that just switching password from service control enough? Does the
password stored anywhere else? SSO DB?
Thanks very much!
John
| |
| WenJun Zhang[msft] 2005-04-26, 7:47 am |
| Hi John,
Yes, the impact from the password policy can be serious. Currently I
cannot enumerate all the username/password configurations have to be
modified. There should be lots of no doubt... I'll forward the issue
to our internal to discuss it. Maybe some solution architects or
consultants have experience on this kind of cases and can offer some
ideas on it. If so, I'll update the information here. Thanks.
Best regards,
WenJun Zhang
Microsoft Online Partner Support
This posting is provided "AS IS" with no warranties, and confers no
rights.
| |
| WenJun Zhang[msft] 2005-04-27, 7:55 am |
| Hi John,
One of out consultant highlights the following places' password must
be updated after changes in AD. However there isn't a tool to
automate this.
"All of the Windows Services running under those service accounts
will be affected by password changes.
BizTalk Base EDI Service (if installed)
BizTalk Service BizTalk Group : BizTalkServerApplication (this is
the default host)
BizTalk Service BizTalk Group : [Other Host Instances used in your
config, if any]
BizTalk Sharepoint Messaging Adapter (if BAS is configured)
Enterprise Single Sign-On Service
Rules Engine Update Service
The BizTalkServerIsolatedHost will need to be update in the BizTalk
Administrator Console as well.
If using Human Workflow Services, I believe your HwsAppPool identity
in IIS will need to have it's password updated as well."
Best regards,
WenJun Zhang
Microsoft Online Partner Support
This posting is provided "AS IS" with no warranties, and confers no
rights.
| |
| John Lee 2005-04-28, 5:55 pm |
| Thanks very very much!
Are we sure that if we update all places listed in your post then there
would be no interruption for our production server? Do we ever save any
password in the SSODB?
Thanks!
John
""WenJun Zhang[msft]"" <v-wzhang@online.microsoft.com> wrote in message
news:RZO4OyxSFHA.264@TK2MSFTNGXA02.phx.gbl...
> Hi John,
>
> One of out consultant highlights the following places' password must
> be updated after changes in AD. However there isn't a tool to
> automate this.
>
> "All of the Windows Services running under those service accounts
> will be affected by password changes.
>
> BizTalk Base EDI Service (if installed)
> BizTalk Service BizTalk Group : BizTalkServerApplication (this is
> the default host)
> BizTalk Service BizTalk Group : [Other Host Instances used in your
> config, if any]
> BizTalk Sharepoint Messaging Adapter (if BAS is configured)
> Enterprise Single Sign-On Service
> Rules Engine Update Service
> The BizTalkServerIsolatedHost will need to be update in the BizTalk
> Administrator Console as well.
>
> If using Human Workflow Services, I believe your HwsAppPool identity
> in IIS will need to have it's password updated as well."
>
> Best regards,
>
> WenJun Zhang
> Microsoft Online Partner Support
>
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
| |
| WenJun Zhang[msft] 2005-04-29, 7:59 am |
| Hi John,
Honestly I do think it can involve some risks.. So it will be ideal
that you can persuade the people give up their plan.
I think what our consultant means here is the SSO service's identity
has to be changed.
Thanks.
Best regards,
WenJun Zhang
Microsoft Online Partner Support
This posting is provided "AS IS" with no warranties, and confers no
rights.
|
|
|
|
|