Changing password of Active Directory service account of IFS Middleware/Database server

​@Soumya Dasgupta Kindly get someone to reply to this Post!

Changing the password itself should not impact anything.  Even if it is set to never expire, you can still change it as you wish and it would have no impact (just stop the service, change the pwd in AD and in the service settings, then restart everything again to make sure it is clean)

If the password did expire then the service would not function properly and IFS MWS would be unavailable.  That said, I’m not sure 100% sure if it would impact the service immediately if it was already actively running, or if it would only have an impact when the service was restarted… my guess is that it would cause a problem when it expired and it isn’t something I would want to have happen.

HTH,

Nick

(As a side note, demanding someone responds to a post after ~4hours is not very helpful in general in a global user community forum where people who might help could be elsewhere in the world...)

​@NickPorter 

Thanks for the reply.

I assumed that the application would not require a restart since the IFS MWS Node Manager service’s ‘Log on as’ property is set to ‘Local System account’.

If the MWS does need to be restarted, we will have to schedule a planned downtime. Therefore, I would like to confirm exactly what actions are required after changing the password of the AD Service Account for the MW/DB servers.

Side Note:

True. I agree. 

I raised a support case for this requirement because I wanted a definitive answer before proceeding. I was advised to post the same query in the Community, which is why I mentioned the case owner’s name—to indicate that it has been shared there.

​@NickPorter 

Additional Info:

Unfortunately, there is no way to test this change as the same AD Service account is used across all three environments. Any modification will directly impact the Production environment.

I am considering the following approach to test before applying changes to the Production service account:

1. Create a new Service Account similar to the existing one, with access to the Test Middleware Server and Database Server.
2. Log in to the Test Middleware server using the new Service Account and reconfigure the IFS MWS. No changes will be made to the Database Server.
3. Once the Test environment is up and running, change the password and verify the application behavior.

Any feedback on this proposed process would be greatly appreciated.