Can I reset the SophosSAU local account password without breaking Sophos?

Question

We have password audits and with Sophos installed on the DC's it shows as an AD account that has a password set to never expire. Can I set it to expire and reset it?

QC · Answer

Hello B_B , 
 Please see What is the SophosSAU account? It should answer most of your questions. 
 And give my regards to your auditor [;)]. A password set to never expire - so what? What's the significance of changing the password of this account? A reasonable lockout policy thwarts any password guessing attack. The account's rights are limited (although it has Log on as a service ). And if someone manages to grab the obfuscated value from the registry and deobfuscate it or otherwise obtains the actual value - what the hacker could do with this account is probably your least concern. 
 Christian