Login service password

[Guest]

Hi All
I'm a NT System Administar
i have 75 windows servers 200 and 2003, on the next month i need to change
the Domain Admin Password , the problem is - some services are runnig with
the domain admins user and password
my question is there a tool to scan all services on multiple servers and
replase the password to the new password
Thanks

 

[Herb Martin]

Hi All
I'm a NT System Administar
i have 75 windows servers 200 and 2003, on the next month i need to change
the Domain Admin Password , the problem is - some services are runnig with
the domain admins user and password
my question is there a tool to scan all services on multiple servers and
replase the password to the new password

Maybe but better this is your opportunity to give every such service
it's OWN account, with strong password (16+ characters with complexity
and some randomization). Make them exceptionally strong and set them
to non-expiring.

Also, make each one DIFFERENT -- do not use the same password for
multiple accounts since if one service is compromised it can leap from
to the others if you use the same account.

Thanks

 

[Joe Richards [MVP]]

Every service should be running under its own account and NO service should be
running under the builtin domain admin account. In fact, no service should
probably be running with domain admin creds at all, there is almost never any
reason to support doing so.

In the meanwhile to get a list of what contexts the services are running under
on a given machine look at svcutil with the viewx switch. It will display the
services, the status, and the creds it runs under. Better yet, it does it remotely.

http://www.joeware.net/win/free/tools/svcutil.htm



joe