Service accounts with password expiration



The corporate auditing requires that all accounts' passwords expire,
including service accounts. Questions:

1. Is it really a security recommendation?
2. Is there an easy way to automate this process (as a scheduled task, for
example)?
2. If a modify the password in the service settings, will this one keep
running with no disruption?
3. If I modify passwords for clustering service accounts, will those ones
keep running with no disruption?

Thanks,

Felipe


.



Relevant Pages

  • Re: Cluster services with expiring passwords
    ... The corporate auditing requires that service accounts have their passwords ... I have a two-node SQL Server clustering and I'm looking for a way to ... check "Password never expire" on the account properties. ...
    (microsoft.public.windows.server.clustering)
  • Re: Manage user account service password ?
    ... it is typical to configure service accounts to have ... Joe Kaplan-MS MVP Directory Services Programming ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ... an easy solution to change service passwords every 3 months for example? ...
    (microsoft.public.windows.server.active_directory)
  • Re: physical security
    ... You do not need tools to hack the dit-db, and ipsec just helps you to ... To retrieve the passwords I'll just need to start ... To prevent him to get the other accounts ... as passwords for your service accounts you can use very ...
    (microsoft.public.windows.server.active_directory)
  • Re: Manage user account service password ?
    ... The hard part is getting all of the persisted passwords updated in the ... to enforce "single use" for service accounts so that you don't have to try ... The recommended pratice is to set svc accounts pwd to never expire; ... You will have the option to set random pwds. ...
    (microsoft.public.windows.server.active_directory)
  • Re: rbac user management question
    ... users, modify passwords, etc... ...  It all works fine, but the 'webadmin' ... user is now able to change the root password... ...
    (comp.unix.solaris)