Video Screencast Help

Need to Change Vault Service Account Password....

Created: 31 Oct 2013 • Updated: 31 Oct 2013 | 14 comments
Dnaik79's picture
This issue has been solved. See solution.

Hi...,

As we are using Enterprise Vault of version 10.0.3 and we added two Evservers in Single Evsite With Microsoft clustering with both EV & SQL for local failover in N+1 configuration.Now beacuse of password expiry policy VSA password will be expire after few days.

So we want to know where we need to update the entery of new password in Ev application and cluster end??

Regards

Dnaik

Operating Systems:

Comments 14 CommentsJump to latest comment

EV_Ajay's picture
When you change the Vault Service account password it is important that the change is updated on all Enterprise Vault servers. The best method is to change the password while you are logged in as the Vault Service account.
 
To change the Vault Service account password
 
1.As the Vault Service account, start the Administration Console.
 
2.In the left pane, expand Enterprise Vault
 
3.Right-click Directory and click Properties.
 
4.In Directory Properties, click the Service Account tab.
 
5.Press Ctrl+Alt+Del and choose the option to change the password.
 
6.Change the account password and then return to the Directory Properties tab.
 
7.Change the password on the Directory Properties tab and click OK.
 
 
 
How to change the Vault Service Account (VSA) or reset its password when using Enterprise Vault (EV) for Microsoft Exchange
http://www.symantec.com/docs/TECH48035.

Thanks,

Ajay

EV_Ajay's picture

The Enterprise Vault Service Account (VSA) password on Cluster needs to be changed : 

1. Offline all EV resources in Cluster Administrator.
2. Temporarily Freeze the service group for EV in Cluster Administrator
3. Change the password for the Vault Service Account in Active Directory
4. Change the password on all EV Services on every EV Node via the services.msc console
5. Unfreeze the service group for EV in Cluster Administrator 
6. Bring ONLY Directory and Admin back online again
7. Change the password for the VSA in the VAC under 'Directory Properties - Service Account' and click OK
8. Stop Directory and Admin resources via Cluster Administrator and then start ALL EV Resources
9. Check Event logs for any errors and finally test failover

Thanks,

Ajay

SOLUTION
EV_Ajay's picture

Hi,

You need to change password in the EV Services Logon Tab and in the Vault Admin Console "Directory" peoperties.

There is no need to made any change on SQL side.

Thanks,

Ajay

Dnaik79's picture

HI Ajay,

Change the password on all EV Services on every EV Node via the services.msc console
 

In above steps we need to change password on all nodes?

Denis Kattithara 1's picture

You may want to also check any other locations where the VSA is being used, eg. DA etc. It is important that the password is updated manually for such services where not updated via console..

EV_Ajay's picture

Hi,

Sorry to say but you need to change the password on all the nodes in Services.

Thanks,

Ajay

Dnaik79's picture

Is there any documented note or recommendation from Symantec that Vault service account password change policy on regular basis is not a good exercise???

EV_Ajay's picture

Hi,

Please refer following TechNote :

The Enterprise Vault Service Account Permission.

http://www.symantec.com/docs/TECH125211 

As per mentioned in the articles "The account Password never expires." It means should not change the password.

Thanks,

Ajay

Dnaik79's picture

Also what will be the impact if we not change the password before expiry and password gets expired. It’s possible to change password after its gets expired or we need to change before expired

EV_Ajay's picture

Hi,

If your password is expired and you haven't change then all EV Services will we down. Because when it try to do the authentication with Active Directory that time AD will not be able to authenticate. As a result the EV Server down. User is unable to archive / restore / retrieve archived item.

Thanks,

Ajay

Dnaik79's picture

Ok...But i have to follow same steps which you mentioned in earlaier post if my password get expired before it changed.

EV_Ajay's picture

Right.

We normally recommend to do not change password / password never expire. But if you company policy want to change the password make sure it should be change before it expire . so it will not impact EV / users.

Thanks,

Ajay

EV_Ajay's picture

Hi ,

Thanks for marking solution.

Thanks,

Ajay