Monday, November 16, 2009

Change Moss User / Password

Taken from Joel again (http://blogs.msdn.com/joelo/archive/2006/08/22/712945.aspx)


WSS V3

If you know the password before the password change, you can do the following to your machine with WSS on it:


1. Ensure the WSS Administration and WSS Timer services are running on all machines.

2. On machine with central admin (WFE1)
a. stsadm -o updatefarmcredentials -userlogin "domain user" -password "newPassword"
b. iisreset /noforce (optional)

3. On any machine after this completes (wait for the "Administration Application Pool Credential Deployment" job definition to go away on the Timer Job Definitions central admin page)
a. stsadm -o updateaccountpassword -userlogin "domain user" -password "newpassword" -noadmin

Otherwise, after a password change:

Ø Go to the server central admin box:

1. run the command stsadm –o updatefarmcredentials –userlogin -password
2. User must run IISReset /noforce to complete the action.
3. Delete the updatefarmcredentials timer job on central admin page->operations->job definitions page

Ø Go to each other server in the farm:

1. run the command stsadm –o updatefarmcredentials –userlogin -password -local.
o If –local isn’t supplied, it will fail because step (4) created a timer job that locks creating OTHER timer jobs.

Ø On any machine after this completes (wait for the "Administration Application Pool Credential Deployment" job definition to go away on the Timer Job Definitions central admin page)
a. stsadm -o updateaccountpassword -userlogin "domain user" -password "newpassword" -noadmin


More verbose Instructions from MSIT. Note these are not really polished, but a have some integrated tips that should be of value.
Password Changes
WSS WFEs

Central Admin AppPool (First)

Stsadm –o updatefarmcredentials –userlogin -password
Other AppPools
Stsadm –o updateaccountpassword –userlogin -password [-noadmin]
Use –noadmin if the Central Admin AppPool is the same account as other Web AppPools
WSS Search (Special Cases – look for it on Operations\Services on Server)
Central Admin UI -> Operations -> Services on Server -> Windows SharePoint Services Search
Update the Configurable Password In Service Account AND\OR Content Access Account as Needed
Office Server FarmsCentral Admin AppPool (First)Stsadm –o updatefarmcredentials –userlogin -password WFE (other) AppPools
Stsadm –o updateaccountpassword –userlogin -password [-noadmin]
Use –noadmin if the Central Admin AppPool is the same account as other Web AppPoolsOffice Server Search (Special Cases – Look for it on Operations\Services on Server)
Central Admin UI -> Operations -> Services on Server -> Office SharePoint SearchUpdate the Confgurable Password in Service AccountO12 SSP & Excel
Central Admin UI -> Application Management -> Create or Confgure This Farm’s Shared Services -> Hover over SSP in Farm and Edit Properties
Update the SSP Service Credentials as Needed
Office Server Crawl/Index Account
SSP Admin UI -> Search Settings -> Default Content Access Acount
Update Account and PW as needed
NotesStsadm –o updatefarmcredentials and stsadm –o updateaccountpassword should do the trick for everything but the SSPs. Run updateaccountpassword across on specific boxes if you are having NLB or connection issues

Central admin app pool ID (“database access” account):
· stsadm.exe -o updatefarmcredentials -userlogin -password
· Other app pool IDs:
· Stsadm.exe –o updateaccountpassword –userlogin -password [-noadmin]
· SSP Service credentials (2 methods)
1. UI: Central Administration > Application Management > Manage this Farm's Shared Services > access the ECB for the SSP you need to change > click on "Edit Properties" > on "Edit Shared Services Provider" page, in "SSP Service Credentials" set the account/password (also set the account/password for any Process account that need access to the SSP (typically done when configuring IFSS)
2. stsadm.exe -o editssp
-title
[-newtitle ]
[-sspadminsite ]
[-ssplogin ]
[-ssppassword ]
[-indexserver ]
[-indexlocation ]
[-setaccounts ]
[-ssl ]

Search Service credentials:
o UI: Central Administration > Operations > Services on Server > Office SharePoint Server Search > update the creds in the “Service Account” section. OR
stsadm -o osearch -farmserviceaccount -farmservicepassword

· WSS Search Service credentials:
o UI: Central Administration > Operations > Services on Server > Windows SharePoint (help) Search > update the creds in the “Service Account” section and in the “crawl account” section if needed. OR
stsadm -o spsearch -farmserviceaccount -farmservicepassword
· SSO:
o Need to use the SCM to update the password for the SSO service account; resart SSO Service
o Once done, go to Central Administration > Operations > Manage settings for Single Sign-On and update any creds required
· Profile Import account:
o UI: SSP Admin > User profiles and properties > Configure Profile Import > update creds in “default access account” section
· Excel: Should be re-set when you change the creds for the SSP Service account as described above.

No comments: