Sophos Update Manager & Database Account - Password Change

Question

Hi,

I'm in a little bit of a pickle. I used our domain administrator account for the update manager and database account. What happens if we change the password? What do I need to update in order for everything to continue to work? I noticed that there are some services that use domain administrator, is it as easy as changing the password on these?

And I'm assuming the updating policy would need to be changed?

Is there anything else I'm missing?

Thanks!

This thread was automatically locked due to age.

jak · Accepted Answer

Hi,

It will break the system, therefore I would suggest:

1. Create a new "DB" account and "SUM" account. Suggest domain accounts as per:

http://www.sophos.com/en-us/support/knowledgebase/113954.aspx

I.e. [domain]\SophosManagement and [domain]\SophosUpdateMgr

2. Run setup.exe from the installer directory, i.e. C:\sec_52\ServerInstaller\setup.exe (For SEC 5.2)

This will allow you to change the "DB" account.

3. Once the "modify" is complete, lauch SEC, go through the updating policies, changing the username to [domain]\SophosUpdateMgr

Ideally wait until all computers have complied with policy, This could take some time, if computers are away from the office, etc.. Once all computers are same as policy you can change the password for the administrator account as it should no longer be referenced.

You could change it before but then clients will fail to update at least once I suspect until they get the new policy. Possibly not a huge problem.

If you have any remote consoles, then you will probably have to tun setup.exe on those to modify the install to use the new "DB" account. i.e. [domain]\SophosManagement

Regards,

Jak