Changing root Administrator password

Hello,

I would like to change the password for the root Administrator account for
the domain. I have found that it is being used as the logon account for a
SQL cluster and I'm working on changing that. When I get that issue
resolved, is it as easy as resetting the password and being on my merry way?
I do know that the account is not used for any certificate services or
anything else. I'm just concerned with changing the password, obviously..

TIA,
Dean

Hello Dean,

If you are sure that all applications/roles or wherever it was used, is known
by yourself, you can change it like normal user passwords.

In the future you should use always a so called 'service account' for this
tasks, with the minimum needed permissions and a long strong password, which
of course is written down and stored in a safe place.

Within 2008 R2 there is a new option for using/configuring "managed service
accounts":
http://technet.microsoft.com/en-us/l...59(WS.10).aspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello,
>
> I would like to change the password for the root Administrator account
> for the domain. I have found that it is being used as the logon
> account for a SQL cluster and I'm working on changing that. When I
> get that issue resolved, is it as easy as resetting the password and
> being on my merry way? I do know that the account is not used for any
> certificate services or anything else. I'm just concerned with
> changing the password, obviously..
>
> TIA,
> Dean

Meinolf,

That is definitely part of my plan is to change the logon account to a
service account. This was a domain setup prior to me so I'm still fixing
things I'm finding. The administrator account is obviously part of the
enterprise admin group, do you see any additional issues in changing the
password or should it be pretty straight forward once I get it removed from
my cluster service and SQL agent?

Thanks,
Dean

"Meinolf Weber [MVP-DS]" wrote:

> Hello Dean,
>
> If you are sure that all applications/roles or wherever it was used, is known
> by yourself, you can change it like normal user passwords.
>
> In the future you should use always a so called 'service account' for this
> tasks, with the minimum needed permissions and a long strong password, which
> of course is written down and stored in a safe place.
>
> Within 2008 R2 there is a new option for using/configuring "managed service
> accounts":
> http://technet.microsoft.com/en-us/l...59(WS.10).aspx
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Hello,
> >
> > I would like to change the password for the root Administrator account
> > for the domain. I have found that it is being used as the logon
> > account for a SQL cluster and I'm working on changing that. When I
> > get that issue resolved, is it as easy as resetting the password and
> > being on my merry way? I do know that the account is not used for any
> > certificate services or anything else. I'm just concerned with
> > changing the password, obviously..
> >
> > TIA,
> > Dean
>
>
>

Hello Dean,

I am not experienced with SQL accounts password change, therefore better
use a SQL newsgroup, on the cluster just make sure the service get a new
account with the needed permissions, so they start again.

Changing the administrator password shouldn't have any influence except on
apps/roles where it was used.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Meinolf,
>
> That is definitely part of my plan is to change the logon account to a
> service account. This was a domain setup prior to me so I'm still
> fixing things I'm finding. The administrator account is obviously
> part of the enterprise admin group, do you see any additional issues
> in changing the password or should it be pretty straight forward once
> I get it removed from my cluster service and SQL agent?
>
> Thanks,
> Dean
> "Meinolf Weber [MVP-DS]" wrote:
>
>> Hello Dean,
>>
>> If you are sure that all applications/roles or wherever it was used,
>> is known by yourself, you can change it like normal user passwords.
>>
>> In the future you should use always a so called 'service account' for
>> this tasks, with the minimum needed permissions and a long strong
>> password, which of course is written down and stored in a safe place.
>>
>> Within 2008 R2 there is a new option for using/configuring "managed
>> service
>> accounts":
>> http://technet.microsoft.com/en-us/l...59(WS.10).aspx
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers
>> no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> Hello,
>>>
>>> I would like to change the password for the root Administrator
>>> account for the domain. I have found that it is being used as the
>>> logon account for a SQL cluster and I'm working on changing that.
>>> When I get that issue resolved, is it as easy as resetting the
>>> password and being on my merry way? I do know that the account is
>>> not used for any certificate services or anything else. I'm just
>>> concerned with changing the password, obviously..
>>>
>>> TIA,
>>> Dean

Hi Dean,
It's not hard to do that,
Check the following links, test the procedure in a lab environment then you
should be able to it in PRD.
Change the Cluster service account password
http://support.microsoft.com/kb/305813
change service accounts for a clustered computer that is running SQL Server
http://support.microsoft.com/kb/239885
or
http://support.microsoft.com/kb/283811

--
I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MVP Directory Services
"Dean" <Dean@discussions.microsoft.com> wrote in message
news:8D8E7375-9DC3-454A-9A5D-645B93E1AA84@microsoft.com...
> Hello,
>
> I would like to change the password for the root Administrator account for
> the domain. I have found that it is being used as the logon account for a
> SQL cluster and I'm working on changing that. When I get that issue
> resolved, is it as easy as resetting the password and being on my merry
> way?
> I do know that the account is not used for any certificate services or
> anything else. I'm just concerned with changing the password, obviously..
>
> TIA,
> Dean

Be careful changing a cluster password, make sure you use the command line
cluster. I would strongly urge you to create a new service account and make
this the new cluster id. That will mnot be as simple as the cluster commend
though. So, unless you want to bring down the cluster to manually change
the password use the cluster command and good luck.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Dean" <Dean@discussions.microsoft.com> wrote in message
news:8D8E7375-9DC3-454A-9A5D-645B93E1AA84@microsoft.com...
> Hello,
>
> I would like to change the password for the root Administrator account for
> the domain. I have found that it is being used as the logon account for a
> SQL cluster and I'm working on changing that. When I get that issue
> resolved, is it as easy as resetting the password and being on my merry
> way?
> I do know that the account is not used for any certificate services or
> anything else. I'm just concerned with changing the password, obviously..
>
> TIA,
> Dean