NEVER use the admin account for services, way too many ways for things to break.
Come up with a scheme, I have used SVC_servicename to make accounts, it's easy to keep track of all of the service accounts that way. Grant just enough permissions to do the job, but that's what we all do for everything isn't it? We use a domain account, make it local admin of the system in question if need be, and grant the "logon as a service" right when setting up the the system. Schedule is a great example, there aren't too many cases where you would need domain rights for that account, make it a local admin on your systems, and grant it "log on as a service" right on the server. That way you only have to change one account password, and the bit on each server that uses it to say what the password is. That's just a registry key, fairly easy to automate. --------Code snippet ------------- chsvc -s schedule -u "your_domain\your_account" -w password ntrights +r SeServiceLogonRight -u "your_domain\your_account" ---------End code snippet ---------- This uses 2 reskit tools, but works like a champ. I do this after installing the OS. If you build a job that executes the first line on a server remotely you only need chsvc on the server to change the passwords on a long list of servers. Or use this from ultratech http://www.ultratech-llc.com/KB/_vti_script/Search.html0.idq Good luck, Kevin +-------------------------------------------------------------------+ Kevin Flanagan C/S Planning Engineer III I/T Implementation Department Branch Banking & Trust Company 3261 Atlantic Avenue, Suite 116 MC: 172-85-01-00 Raleigh, NC 27604 Voice: 919-716-6209 -----Original Message----- From: Carine Lim, Sr.SystEng, SCSM/NSB [mailto:[EMAIL PROTECTED]] Sent: Monday, October 01, 2001 8:12 PM To: MSWinNT Discussions Subject: RE: password changes Yes................ ;-) -----Original Message----- From: Mike Tree [mailto:[EMAIL PROTECTED]] Sent: Monday, October 01, 2001 6:58 PM To: MSWinNT Discussions Subject: password changes I assume that if the administrators password changes, every service that uses the administrator account will require changing too. Can someone please confirm this. Mike Tree ------ You are subscribed as [EMAIL PROTECTED] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EMAIL PROTECTED] ************************************************************************ Improve your customers' satisfaction at a lower cost. Click here for details :- http://www.scs.com.my/scsNews.asp?article=30 ************************************************************************ ------ You are subscribed as [EMAIL PROTECTED] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EMAIL PROTECTED] ------ You are subscribed as [email protected] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EMAIL PROTECTED]
