Steps to Change SharePoint Service Accounts in MOSS 2007

 

Ø Change SharePoint Central Administration Account

1.       On servers running SharePoint Central Administration site run the following command:
stsadm -o updatefarmcredentials -userlogin DOMAIN\USERNAME -password PASSWORD

2.       On other servers not running SharePoint Central Administration site run the following command:
stsadm -o updatefarmcredentials -userlogin DOMAIN\USERNAME -password PASSWORD -local

3.       Run iisreset /noforce to restart IIS

4.       To make sure that this operation completed, open SharePoint Central Administration site >> Operations >> Timer job definitions and wait until Administration Application Pool Credential Deployment timer job disappears from the list.

Ø  Change Application  Pool Accounts

There are two ways to change application pool accounts in SharePoint: first one using GUI, and the second using STSADM command. To change application pool accounts using GUI:

1.       Open SharePoint Central Administration site >> Operations >> Service Accounts (under Security Configuration section)

2.       Select Web Application Pool option and pick Web Service and Application Pool you would like to make changes to

3.       Enter username and password for application pool service account.

4.       You need to do this for each application pool account you would like to change on every SharePoint server in your farm

To change application pool account using STSADM command, run:

stsadm -o updateaccountpassword -userlogin DOMAIN\USERNAME -password PASSWORD –noadmin

Once again, you need to do this for each application pool account you would like to change on every SharePoint server in your farm.

To change application pool account for SharePoint Central Administration web application run:

stsadm -o updatefarmcredentials -userlogin DOMAIN\USERNAME -password PASSWORD

Ø  Change Windows SharePoint Services Help Search account

To change Windows SharePoint Services Help Search account, run:

stsadm -o spsearch -farmserviceaccount DOMAIN\USERNAME -farmservicepassword PASSWORD

Change Default content access account (used by the Windows SharePoint Services Help Search service)

To change Default Content Access account, run:

stsadm -o spsearch -farmcontentaccessaccount DOMAIN\USERNAME -farmcontentaccesspassword PASSWORD

Change Office SharePoint Server Search service account

To change Office SharePoint Server Search account, run:

stsadm -o osearch -farmserviceaccount DOMAIN\USERNAME -farmservicepassword PASSWORD

Ø  Change Default content access account (used by the Shared Service Provider)

To change Default Content Access account, if the Infrastructure Update for Microsoft Office Servers is installed:

1.       Open SharePoint Central Administration site, click on your Shared Services Provider (in the Quick Launch, in the Shared Services Administration group)

2.       On the Shared Services Administration page, in the Search section, click Search Administration.

3.       On the Search Administration page, on the Quick Launch, in the Crawling section, click Default content access account

4.       On the Default Content Access Account page, in the Account box, type the domain and user name for the account (in the form DomainName\UserName)

5.       In the Password and Confirm Password boxes, type the password for the account.

6.       Click OK.

To change Default Content Access account, if the Infrastructure Update for Microsoft Office Servers is not installed:

1.       Open SharePoint Central Administration site, click on your Shared Services Provider (in the Quick Launch, in the Shared Services Administration group)

2.       On the Shared Services Administration page, in the Search section, click Search Settings.

3.       On the Configure Search Settings page, in the Crawl Settings section, click Default content access account

4.       On the Default Content Access Account page, in the Account box, type the domain and user name for the account (in the form DomainName\UserName)

5.       In the Password and Confirm Password boxes, type the password for the account.

6.       Click OK.

You can also use crawl rules to specify a different content access account or authentication method, read more at http://technet.microsoft.com/en-us/library/cc263052.aspx.

Ø  Change Shared Service Provider Service Accounts

To change Shared Service Provider Service Accounts, run:

stsadm -o editssp -title SHAREDSERVICESPROVIDERNAME -ssplogin DOMAIN\USERNAME -ssppassword PASSWORD

You need to run this command on every SharePoint server in your farm.

Ø  Change Excel Services Account

To change Excel Services Account:

1.       Open SharePoint Central Administration site, click on your Shared Services Provider

2.       Click edit Excel Services settings

3.       Enter username and password for the Excel Calculation Services account and then click the OK button.

Ø  Change Profile Access account

1.       Open SharePoint Central Administration site, click on your Shared Services Provider

2.       Click User profiles and properties

3.       Click Configure profile import

4.       Enter username and password and then click the OK button

=================================================================

Steps to change the account password at window level:

1)      Log-in to server with account

2)      Press Alt+Ctrl+End. It will go to Windows security

3)      Click “Change Password” and

4)      Now Enter Old password, New password and Confirm new password

5)      Click ok.

Steps to change the passwords for service accounts in SharePoint Server 2007.

1.       Update the password for the account that is used by the Central Administration application pool. To do this, follow these steps:

a.       On all servers in the server farm, open a command prompt, type the following line, and then press Enter:

cd %commonprogramfiles%\Microsoft Shared\Web server extensions\12\Bin

b.       Do one of the following:

§  On the server that hosts the Central Administration website, type the following line at the command prompt, and then press Enter:

stsadm -o updatefarmcredentials -userlogin DomainName\UserName -password NewPassword

§  On all other servers in the server farm, type the following line at the command prompt, and then press Enter:

stsadm -o updatefarmcredentials -userlogin DomainName\UserName -password NewPassword -local

c.        Restart Internet Information Services (IIS) 6.0. To do this, type the following line at the command prompt, and then press Enter: 

iisreset /noforce

2.       Verify that the Administration Application Pool Credential Deployment job definition is no longer displayed on the Timer Job Definitions page of SharePoint 3.0 Central Administration. To do this, follow these steps:

 .         Open SharePoint 3.0 Central Administration, click Operations, and then click Timer job definitions under Global Configuration.

a.       Verify that the Administration Application Pool Credential Deployment job definition is no longer displayed in the list.

Note If the Administration Application Pool Credential Deployment job definition is displayed in the list, wait until it disappears from the list.

3.       Update the password for the application pool account that is used by web applications on the server farm. To do this, type the following line at a command prompt on every server on the server farm, and then press Enter:

stsadm -o updateaccountpassword -userlogin DomainName\UserName -password NewPassword -noadmin

4.       Update the password for the account that is used to run the Windows SharePoint Services Help Search service. To do this, type the following line at a command prompt on every server on the server farm, and then press Enter:

stsadm.exe -o spsearch -farmserviceaccount DomainName\UserName -farmservicepassword NewPassword

5.       Update the password for the default content access account that is used by the Windows SharePoint Services Help Search service. To do this, type the following line at a command prompt on every server on the server farm, and then press Enter:

stsadm.exe -o spsearch -farmcontentaccessaccount DomainName\UserName -farmcontentaccesspasswordNewPassword

6.       If you are running SharePoint Server 2007, you must also follow these steps:

 .         Update the password for the account that is used by every Shared Services Provider (SSP) on the server farm. To do this, type the following line at a command prompt on every server on the server farm, and then press Enter: 

stsadm.exe -o editssp -title SharedServicesProviderName -ssplogin DomainName\UserName -ssppassword NewPassword

a.   Update the password for the account that is used to run the Office SharePoint Server Search service. To do this, type the following line at the command prompt, and then press Enter: 

stsadm.exe -o osearch -farmserviceaccount DomainName\UserName -farmservicepasswordNewPassword

b.   If the server farm is configured to use single sign-on, update the password for the account that is used by the Microsoft Single Sign-On Service. To do this, follow these steps:

1.       Click Operations in SharePoint 3.0 Central Administration, and then click Service accounts under Security Configuration.

2.       Under Windows service, click Single Sign-On Service.

3.       Under Configurable, specify the password, and then click OK.

c.        Update the password for the default content access account that is used by the Office SharePoint Server Search service. To do this, follow these steps:

0.       Open SharePoint 3.0 Central Administration, and then click the link to the SSP web application under Shared Services Administration.

1.       Under Search, click Search settings, and then click Default content access account.

2.       Specify the password to use for the content access account, and then click OK.