Jesper M. Christensen

SharePoint and Security

Changing SQL and Sharepoint services account


Changing the account which the SQL or Sharepoint services run as can give you a bit of a headache. After researching a bit on this subject I found some best practices and all my problems went away. You can easily find out if it works by simply reboot your server and see if the services start up correct. If the SQL Server or Windows SharePoint Services Timer service states "Service Did Not Start Due to a Logon Failure", you need to be aware of the following:

SQL Server services account
Change these credentials through the Management Console. This is a requirement for both SQL 2000 and 2005 (MS Article: http://msdn2.microsoft.com/en-US/library/ms345578.aspx)

Sharepoint services account
Be aware that the credentials is to be changed in the Central Administration or command line (MS Article: http://support.microsoft.com/kb/934838)

If you do not use this procedure and change the account/password through the services console you can get problems and need to type your password in manually and start the service.

AND remember the account needs to have the "log on as a service" rights on the server, or you will get the error with event Id 7038. The account can actually lose this right, so make a group policy on the server/domain to make sure this right is preserved during service-restart or server-reboot.

 

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: