Password change

Posted on 2005-04-28
Last Modified: 2010-03-19

We had something break yesterday.  I'm trying to figure out what happened, in the interest of "Lessons Learned".  Here are the facts and background.

1.  We use Active Directory.

2.  I needed to change the password for the SQL Server account and the SQL Server Agent account.  We have three SQL Servers.  Base on a response to a post I made in this forum, we decided to use one domain account for the SS accounts and the SS Agent accounts.  There was already an account being used for one of the SS Agents.  Since no one remembered the password, we decided to change it.

3.  We have a weekly maintenance window once a week.  I asked the guy who handles the domain accounts to change the password on the account for me.  I was going to stop and restart the services during the maintenance window.

4.  I was unable to be here during the maintenance window, so I never stopped and restarted the services.  I didn't think it mattered, because it is my understanding that the password change does not take effect until the services are stopped and restarted.

5.  I was out yesterday.  SS Agent jobs that access the servers broke (I don't much, yet, about how those apps are architected).  The guys here stopped and restarted the services, and it solved the problem.

So the initial diagnosis in most folks' minds is that changing the password broke the jobs.  But I thought that password changes don't take effect until the services were stopped and restarted.

Can someone offer their opinion here?


Question by:guillotj

    Author Comment

    Please someone give me some insight into this.  The guy doing the complaining today was going on without giving me complete info (damn user <joke>).  "something about IUSR or something like that", he would say.

    I don't know what the front end code looks like.  I know who the IUSR_...  is.  Is it possible that a password was hardcoded into a connection string in IIS?  If we changed the domain account's password, but hadn't started and stopped the SS services, it seems that SS Agent would still run.  It doesn't read the new password until a stop and start, right?

    The folks across the country from me were complaining their jobs weren't running, but all the jobs I've created on the server ran fine, so the SS Agent was working OK.

    So it's not merely a case of SS Agent not running.  They must have been affected when I changed the domain account password, but not in the sense that the Agent wasn't running.

    I apologize that I don't have more info, but that's all I could glean from a guy who is not experienced in Windows or SS.  But his repeating of "IUSR something or other" gives me a clue that it's IIS-related.  I suppose that changing the domain account without changing the settings in IIS Manager could have definitely broken things.

    But they report that when they stopped and restarted SQL Server, it fixed the problem.  So it's getting confusing.  I'm probably getting faulty info from my colleague.

    Come on, y'all, someone come through for me...tomorrow's another day, and I want it to be a good one.  I increased the points, since I haven't had a response all day, so maybe the question is tougher than I thought :)
    LVL 11

    Accepted Solution

    I might be something simple.

    If the services where already running and therefor logged in under the old password then they would be fine. However if the services spawned other services then they would try to log in using the parent password of the already connected service, which is no longer valid.

    Best I can think of at the mo, but will give it further thought


    Author Comment

    Thanks!!  Exactly my thoughts!!

    BTW, Mr. Sentinel, I don't think you're simple at all :)


    Read first line of your post...I couldn't resist...apologies... :)

    It's FRIDAY!!!!!!!

    And please do send more info, I find your comments quite helpful...


    Featured Post

    PRTG Network Monitor: Intuitive Network Monitoring

    Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

    Join & Write a Comment

    When you hear the word proxy, you may become apprehensive. This article will help you to understand Proxy and when it is useful. Let's talk Proxy for SQL Server. (Not in terms of Internet access.) Typically, you'll run into this type of problem w…
    JSON is being used more and more, besides XML, and you surely wanted to parse the data out into SQL instead of doing it in some Javascript. The below function in SQL Server can do the job for you, returning a quick table with the parsed data.
    Via a live example combined with referencing Books Online, show some of the information that can be extracted from the Catalog Views in SQL Server.
    Using examples as well as descriptions, and references to Books Online, show the documentation available for datatypes, explain the available data types and show how data can be passed into and out of variables.

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now