• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 435
  • Last Modified:

Need to change Windows domain admin password

I need to change the domain admin password, which is simple through AD, but what is the normal practice for using a username/password on scheduled tasks that are running on the many servers?  I have always just used the same domain admin password for the scheduled tasks, but would I need to go back into each task and update the password after I make the change?  Is there a better practice for using a different user/pass on the tasks, other than the domain admin?  
4 Solutions
SandeshdubeySenior Server EngineerCommented:
If you change the domain admin password,you need to change the same in schedule task.
It seems that you have different schedule task for different server if this is the case you need to change it manaully,for future you can create another domain admin user and set to password nerver expires  and you can use the same id is schedule task and don't share the credentilas with any user or admin.

The existing domain user id password can be changed anytime as per the requirement that is the dependency will be remove by creating another domain admin credential for schedule tasks.

If you have same schedule task for the multiple server you can create group policy for the same.You can create a batch file and apply the schedule task by login script/startup script
Suliman Abu KharroubIT Consultant Commented:
What Sandeshdubey says is the best practice...

Additionally, if your domain functional level is 2008 R2, then it will be changed automatically -- a new feature in R2--
Suliman Abu KharroubIT Consultant Commented:
I have always had a SVC account that I use for Scheduled Tasks, but at the same time I disable the built-in administrator account for security reasons.
I would expect that the disabling part is pretty standard these days.
Ditto Flipp.  Disable the default admin account (as well as Guests).  Create a new one.  Each admin should use their own; no one should be using "the" admin account.  Admin accounts are used for admin-ing.  If a person has a domain admin account they should also have a standard user account.  The user account (or a security group to which they belong) may be a local admin on their workstation.  Use service accounts for running services and scheduled tasks.  These service accounts should have privileges to do what they need to do only and should generally not have the ability to log on interactively, that is, no one can log on to a dekstop with a service account.  Some applications are written in a way that need this permission though.  Not all service accounts need to have the same rights.  Assign rights and privileges accordingly.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

Tackle projects and never again get stuck behind a technical roadblock.
Join Now