To change the password of service accounts in SharePoint Server 2007 and in Windows SharePoint Services 3.0, follow these steps.
Note If the SQL Server service uses a domain account, and the password of that domain account is either expired or invalid, make sure that you update the password of the domain account before you perform this procedure.

1.Update the password of the account that is used by the Central Administration application pool. To do this, follow these steps:

a.On all servers in the server farm, open a command prompt, type the following line, and then press ENTER:

cd %commonprogramfiles%Microsoft SharedWeb server extensions12Bin

b.On the server that hosts the Central Administration Web site, type the following line at the command prompt, and then press ENTER:

stsadm –o updatefarmcredentials –userlogin DomainNameUserName -password NewPassword

c.On all other servers in the server farm, type the following line at the command prompt, and then press ENTER:

stsadm –o updatefarmcredentials –userlogin DomainName -password NewPassword -local

d.Restart Microsoft Internet Information Services (IIS) 6.0. To do this, type the following line at the command prompt, and then press ENTER:

iisreset /noforce

2.Verify that the Administration Application Pool Credential Deployment job definition is no longer displayed on the Timer Job Definitions page of SharePoint 3.0 Central Administration. To do this, follow these steps:

a.Open SharePoint 3.0 Central Administration, click Operations, and then click Timer job definitions under Global Configuration.

b.Verify that the Administration Application Pool Credential Deployment job definition is no longer displayed in the list.
Note If the Administration Application Pool Credential Deployment job definition is displayed in the list, wait until it disappears from the list.

3.Update the password of the application pool account that is used by Web applications on the server farm. To do this, on every server on the server farm, type the following line at the command prompt, and then press ENTER:

stsadm -o updateaccountpassword -userlogin DomainNameUserName -password NewPassword –noadmin

4.Update the password of the account that is used to run the Windows SharePoint Services Help Search service. To do this, on every server on the server farm, type the following line at the command prompt, and then press ENTER:

stsadm.exe -o spsearch -farmserviceaccount DomainNameUserName -farmservicepassword NewPassword

5.Update the password of the default content access account that is used by the Windows SharePoint Services Help Search service. To do this, on every server on the server farm, type the following line at the command prompt, and then press ENTER:

stsadm.exe -o spsearch –farmcontentaccessaccount DomainNameUserName -farmcontentaccesspassword NewPassword

6.If you are running SharePoint Server 2007, you must also follow these steps:

a.Update the password of the account that is used by every Shared Services Provider (SSP) on the server farm. To do this, for every SSP, type the following line at the command prompt, and then press ENTER:

stsadm.exe -o editssp -title SharedServicesProviderName -ssplogin DomainNameUserName -ssppassword NewPassword

b.Update the password of the account that is used to run the Office SharePoint Server Search service. To do this, type the following line at the command prompt, and then press ENTER:

stsadm.exe -o osearch -farmserviceaccount DomainNameUserName -farmservicepassword NewPassword

c.If the server farm is configured to use single sign-on, update the password of the account that is used by the Microsoft Single Sign-On Service. To do this, click Operations in SharePoint 3.0 Central Administration, and then click Service accounts under Security Configuration. Under Windows service, click Single Sign-On Service. Under Configurable, specify the password, and then click OK.

d.Update the password of the default content access account that is used by the Office SharePoint Server Search service. To do this, follow these steps:

a.Open SharePoint 3.0 Central Administration, and then click the link to the SSP Web application under Shared Services Administration.

b.Under Search, click Search settings, and then click Default content access account.

c.Specify the password to use for the content access account, and then click OK.

Example script

The following is an example of how you can use the previous procedure to create a batch file that automates changing the passwords. Use the following syntax to run the script:

FileName.bat DomainNameUserName NewPassword

 @echo off
rem other app pools
echo *** Updating app pool passwords
"%commonprogramfiles%Microsoft SharedWeb server extensions12BINStsadm.exe" -o updateaccountpassword -userlogin %1 -password %2 -noadmin
rem central admin
echo *** Updating Central Admin password
"%commonprogramfiles%Microsoft SharedWeb server extensions12BINStsadm.exe" -o updatefarmcredentials -userlogin %1 -password %2
rem ssp - new
echo *** Updating ssp password for new installs
"%commonprogramfiles%Microsoft SharedWeb server extensions12BINStsadm.exe" -o editssp -title "SharedServices1" -ssplogin %1 -ssppassword %2
rem ssp - upgrade
echo *** Updating ssp password for upgraded installs
"%commonprogramfiles%Microsoft SharedWeb server extensions12BINStsadm.exe" -o editssp -title "Default Web Site" -ssplogin %1 -ssppassword %2
rem osearch
echo *** Updating osearch password
"%commonprogramfiles%Microsoft SharedWeb server extensions12BINStsadm.exe" -o osearch -farmserviceaccount %1 -farmservicepassword %2
echo *** MANUAL UPDATE NEEDED. To update the password, browse to the SSP Web application page, click Search Settings, and then click Default Content Access Account.
rem spsearch
echo *** Updating spsearch password
"%commonprogramfiles%Microsoft SharedWeb server extensions12BINStsadm.exe" -o spsearch -farmserviceaccount %1 -farmservicepassword %2
echo *** Updating spsearch content access account
"%commonprogramfiles%Microsoft Sharedweb server extensions12BINstsadm.exe" -o spsearch –farmcontentaccessaccount %1 -farmcontentaccesspassword %2
rem restarting IIS
echo *** Doing soft restart of IIS
iisreset /noforce
echo on

Modify the script to include the correct names of each SSP in the server farm. If the server farm is configured to use single sign-on, you must also use the sc config command.

Via Microsoft KB 934838

Do you know, I have a Recent Microsoft KBs page? Check out the latest Microsoft KBs (At present only on MOM2005, WSSv3 and SPS2007, more to follow) This particular KB is a note to self and I think, you would like to save this in del.icio.us as well.

%d bloggers like this: