Welcome to MSDN Blogs Sign in | Join | Help

WSS & SharePoint Server 2007 Password Change via STSADM

Haven't seen anything posted on password changes on the web.  Here's some steps that I've come across from the lab managers that should come in handy.  I'm sure someone updating a large farm will find these useful and likely find ways of optimizing or scripting this.  The enhancements to updating the accounts/passwords are so much more powerful.
 
- Joel
 
WSS V3
 
If you know the password before the password change, you can do the following to your machine with WSS on it:
 
 

    1.     Ensure the WSS Administration and WSS Timer services are running on all machines.

 

    2.     On machine with central admin (WFE1)

        a.     stsadm -o updatefarmcredentials -userlogin "domain user" -password "newPassword"

        b.     iisreset /noforce (optional)

 

    3.     On any machine after this completes (wait for the "Administration Application Pool Credential Deployment" job definition to go away on the Timer Job Definitions central admin page)

        a.     stsadm -o updateaccountpassword -userlogin "domain user" -password "newpassword" -noadmin

 

Otherwise, after a password change:
 

Ø  Go to the server central admin box:

 

            1. run the command stsadm –o updatefarmcredentials –userlogin <domain\name> -password <newpassword>

2.     User must run IISReset /noforce to complete the action.

3. Delete the updatefarmcredentials timer job on central admin page->operations->job definitions page

 

Ø  Go to each other server in the farm:

 

             1.  run the command stsadm –o updatefarmcredentials –userlogin <domain\name> -password <newpassword> -local. 

o    If –local isn’t supplied, it will fail because step (4) created a timer job that locks creating OTHER timer jobs.

   

    Ø On any machine after this completes (wait for the "Administration Application Pool Credential Deployment" job definition to go away on the Timer Job Definitions central admin page)

        a.     stsadm -o updateaccountpassword -userlogin "domain user" -password "newpassword" -noadmin

 

 

More verbose Instructions from MSIT.  Note these are not really polished, but a have some integrated tips that should be of value.


Password Changes

WSS WFEs

 

Central Admin AppPool (First)

 

Stsadm –o updatefarmcredentials –userlogin <domain\name> -password <password>

     Other AppPools

Stsadm –o updateaccountpassword –userlogin <domain\name> -password <password> [-noadmin]

Use –noadmin if the Central Admin AppPool is the same account as other Web AppPools

WSS Search (Special Cases – look for it on Operations\Services on Server)

Central Admin  UI -> Operations -> Services on Server -> Windows SharePoint Services Search

Update the Configurable Password In Service Account AND\OR Content Access Account as Needed

Office Server Farms
Central Admin AppPool (First)
Stsadm –o updatefarmcredentials –userlogin <domain\name> -password <password>
WFE (other) AppPools

Stsadm –o updateaccountpassword –userlogin <domain\name> -password <password> [-noadmin]

Use –noadmin if the Central Admin AppPool is the same account as other Web AppPools
Office Server Search (Special Cases – Look for it on Operations\Services on Server)


Central Admin UI -> Operations -> Services on Server -> Office SharePoint Search
Update the Confgurable Password in Service Account
O12 SSP & Excel

Central Admin UI -> Application Management -> Create or Confgure This Farm’s Shared Services -> Hover over SSP in Farm and Edit Properties

Update the SSP Service Credentials as Needed

Office Server Crawl/Index Account


SSP Admin UI -> Search Settings -> Default Content Access Acount

Update Account and PW as needed

Notes
Stsadm –o updatefarmcredentials and stsadm –o updateaccountpassword should do the trick for everything but the SSPs.   Run updateaccountpassword across on specific boxes if you are having NLB or connection issues
 
 

 

Central admin app pool ID (“database access” account):

·         stsadm.exe -o updatefarmcredentials -userlogin <DOMAIN\name> -password <password>

·         Other app pool IDs:

·         Stsadm.exe –o updateaccountpassword –userlogin <DOMAIN\name> -password <password> [-noadmin]

·         SSP Service credentials (2 methods)

1.       UI: Central Administration > Application Management > Manage this Farm's Shared Services > access the ECB for the SSP you need to change > click on "Edit Properties" > on "Edit Shared Services Provider" page, in "SSP Service Credentials" set the account/password (also set the account/password for any Process account that need access to the SSP (typically done when configuring IFSS)

2.       stsadm.exe -o editssp

        -title <SSP name>

        [-newtitle <new SSP name>]

        [-sspadminsite <administration site url>]

        [-ssplogin <username>]

        [-ssppassword <password>]

        [-indexserver <index server>]

        [-indexlocation <index file path>]

        [-setaccounts <process accounts (domain\username)>]

        [-ssl <yes|no>]

 

Search Service credentials:

o   UI: Central Administration > Operations > Services on Server >  Office SharePoint Server Search > update the creds in the “Service Account” section.  OR

stsadm -o osearch -farmserviceaccount <OSS searchserviceaccount> -farmservicepassword

<OSS password>

·         WSS Search Service credentials:

o   UI: Central Administration > Operations > Services on Server >  Windows SharePoint (help) Search > update the creds in the “Service Account” section and in the “crawl account” section if needed.  OR

stsadm -o spsearch -farmserviceaccount <WSS searchserviceaccount> -farmservicepassword <WSS password>

·         SSO:

o   Need to use the SCM to update the password for the SSO service account; resart SSO Service

o   Once done, go to Central Administration > Operations > Manage settings for Single Sign-On and update any creds required

·         Profile Import account:

o   UI: SSP Admin > User profiles and properties > Configure Profile Import > update creds in “default access account” section

·         Excel: Should be re-set when you change the creds for the SSP Service account as described above. 

Published Tuesday, August 22, 2006 6:42 PM by Joel Oleson

Comment Notification

If you would like to receive an email when updates are made to this post, please register here

Subscribe to this post's comments using RSS

Comments

Monday, November 27, 2006 9:42 AM by Cathy

# re: WSS & SharePoint Server 2007 Password Change via STSADM

Thanks so much! This really helped.

Thursday, May 10, 2007 11:34 AM by Centricity

# Updating SharePoint Farm Credentials (Associated to Error Code 997)

I was adding a secondary web front-end to their already existing Production MOSS 2007 Farm for one of

Tuesday, June 26, 2007 11:13 AM by The Boiler Room - Mark Kruger, Microsoft SharePoint MVP

# 2007 MOSS Resource Links (Microsoft Office SharePoint Server)

2007 MOSS Resource Links (Microsoft Office SharePoint Server) Here is an assortment of various 2007 Microsoft

Friday, July 06, 2007 6:03 PM by Eli Robillard's World of Blog.

# How to change service accounts and their passwords in MOSS and WSS 3.0

How to change the Application Pool Identity of a WSS or MOSS web application Open SharePoint Central

# HowTo: Change Service Accounts and their Passwords at Just SharePoint

Tuesday, December 04, 2007 9:19 AM by Joel Oleson's Blog SharePoint Land

# Default Web Application Policies and Determining Number of Service Accounts

Back in the day we use to run everything as an account that is local administrator. This really isn't

Tuesday, December 04, 2007 10:18 AM by Noticias externas

# Default Web Application Policies and Determining Number of Service Accounts

Back in the day we use to run everything as an account that is local administrator. This really isn&#39;t

# MSDN Blog Postings &raquo; Default Web Application Policies and Determining Number of Service Accounts

# MSDN Blog Postings &raquo; Default Web Application Policies and Determining Number of Service Accounts

# roadburn&#8217;s sharepoint 2007 blog &raquo; Blog Archive &raquo; Changing passwords for Sharepoint 2007

# Airliners and Aircrafts &raquo; Joel Oleson&#8217;s Blog SharePoint Land : WSS &amp; SharePoint Server 2007 &#8230;

Monday, May 12, 2008 9:55 AM by moss2007

# How to change user accounts that run MOSS Services

http://sharepointblog.spaces.live.com/blog/cns!74C8FB1191265567!167.entry

Howtochangeuseraccoun...

# How to change service accounts and their passwords in MOSS and WSS 3.0

Monday, April 27, 2009 1:10 PM by jerry.chen

# How to change service accounts and their passwords in MOSS and WSS 3.0

HowtochangetheApplicationPoolIdentityofaWSSorMOSSwebapplication OpenShare...

# Excel Web Access Error &amp; Service Accounts &laquo; Jayaprakash Lingamaneni

# Joel Oleson s Blog SharePoint Land WSS amp SharePoint Server 2007 | debt consolidator

# Joel Oleson s Blog SharePoint Land WSS amp SharePoint Server 2007 | storage bench

Thursday, June 25, 2009 6:43 AM by Connel

# re: WSS & SharePoint Server 2007 Password Change via STSADM

Joel,

 Clear, concise and VERY helpful. Thank you.

Connel

Leave a Comment

(required) 
required 
(required) 

  
Enter Code Here: Required
 
Page view tracker