Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Need to change Windows domain admin password

Posted on 2011-09-17
5
Medium Priority
?
432 Views
Last Modified: 2012-05-12
I need to change the domain admin password, which is simple through AD, but what is the normal practice for using a username/password on scheduled tasks that are running on the many servers?  I have always just used the same domain admin password for the scheduled tasks, but would I need to go back into each task and update the password after I make the change?  Is there a better practice for using a different user/pass on the tasks, other than the domain admin?  
0
Comment
Question by:murryc
5 Comments
 
LVL 24

Accepted Solution

by:
Sandeshdubey earned 500 total points
ID: 36555456
If you change the domain admin password,you need to change the same in schedule task.
It seems that you have different schedule task for different server if this is the case you need to change it manaully,for future you can create another domain admin user and set to password nerver expires  and you can use the same id is schedule task and don't share the credentilas with any user or admin.

The existing domain user id password can be changed anytime as per the requirement that is the dependency will be remove by creating another domain admin credential for schedule tasks.

If you have same schedule task for the multiple server you can create group policy for the same.You can create a batch file and apply the schedule task by login script/startup script
0
 
LVL 23

Expert Comment

by:Suliman Abu Kharroub
ID: 36555641
What Sandeshdubey says is the best practice...

Additionally, if your domain functional level is 2008 R2, then it will be changed automatically -- a new feature in R2--
0
 
LVL 23

Assisted Solution

by:Suliman Abu Kharroub
Suliman Abu Kharroub earned 500 total points
ID: 36555642
0
 
LVL 6

Assisted Solution

by:Flipp
Flipp earned 500 total points
ID: 36556024
I have always had a SVC account that I use for Scheduled Tasks, but at the same time I disable the built-in administrator account for security reasons.
I would expect that the disabling part is pretty standard these days.
0
 
LVL 4

Assisted Solution

by:duffme
duffme earned 500 total points
ID: 36556123
Ditto Flipp.  Disable the default admin account (as well as Guests).  Create a new one.  Each admin should use their own; no one should be using "the" admin account.  Admin accounts are used for admin-ing.  If a person has a domain admin account they should also have a standard user account.  The user account (or a security group to which they belong) may be a local admin on their workstation.  Use service accounts for running services and scheduled tasks.  These service accounts should have privileges to do what they need to do only and should generally not have the ability to log on interactively, that is, no one can log on to a dekstop with a service account.  Some applications are written in a way that need this permission though.  Not all service accounts need to have the same rights.  Assign rights and privileges accordingly.
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
Let's recap what we learned from yesterday's Skyport Systems webinar.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

824 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question