none
Password for service accounts not saved

    Question

  • Hi,

    I have issue with some of Microsoft application / Non Microsoft applications, all running on windows server 2008 R2, and the Domain also windows server 2008 R2 SP1

    The password not saved for Some services running under domain service account,

    And from time to time it will asked to retype the password again to start the services , otherwise if I tried to start the service it will fail to start,

    I’m not sure why the local copy of password for these service accounts will be lost,

    Any idea,


    Best Regards, TT

    Sunday, June 30, 2013 5:53 AM

Answers

  • Hello,

    with "gpresult /h gpo-report.html" you get the configuration logged in as the service account user. Or "rsop.msc" give you a GUI overview about applied settings.

    Of course password and account lockout will always apply.


    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

    Sunday, June 30, 2013 12:23 PM

All replies

  • Hello,

    for service accounts assure to use "Password never expires" on the user account settings of them. If that are NOT Microsoft applications please contact the vendor also about this.

    I would also assure the service accounts are in an own OU that have NO GPOs applied to them that belong to normal users.


    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

    Sunday, June 30, 2013 10:10 AM
  • Hello,

    Sure, there is no "password never expires" on user account setting,

    Also the it is Microsoft Application effected, as MS SQL server,

    Regarding to GPO, how can i check if any gpo has any effect for this issue?


    Best Regards, TT

    Sunday, June 30, 2013 12:08 PM
  • Hello,

    with "gpresult /h gpo-report.html" you get the configuration logged in as the service account user. Or "rsop.msc" give you a GUI overview about applied settings.

    Of course password and account lockout will always apply.


    Best regards

    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/

    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

    Sunday, June 30, 2013 12:23 PM