Changing service passwords on multiple servers

[gmagerr]

Hi all
We are changing the domain Administrator password once a month here. The problem is we have around 100 servers. Some of the servers have services that run under the domain admins account so the passwords need to be changed to reflect the new password. How would I script this? I'd have to query all of the servers to find the services that are running under the domain admins account, then change all of the passwords to the new password. Can anyone help? thanks guys.

 

[markdmac]

I would recommend that you not undertake this and instead would suggest that you create some service accounts that are not permitted to log on locally. This will allow you to set the accoutns to not expire. Don't allow anyone access to the passwords. In fact have two people generate 1/2 of the password so that nobody actually knows it entirely. Have the two people lock their half of the password away in a sealed envelope in a fire proof safe.

I hope you find this post helpful.

Regards,

Mark

 

[mrmovie]

i would have to agree with markdmac on this one.
i posted a reply to a thread on changing passwords for services not so long ago. have a search and you should find it.