Changing the password for Network Access Account
Hi guys, I need to change the password for Network Access Account in SCCM 2007 R3. 100s of clients have already been deployed with this server and there are several secondary sites as well. If I change the password in AD and retype it in the central site, is it going to replicate between other (secondary) sites and the clients that were deployed with this server? Are there any extra steps I need to do to make this work? Why do I need this? I'm setting a primary site in a DR location (as advised by Jannes Alink) so we can deploy our SOE in case our central site goes down. I built a server, configured it, solved issues with webdav, replicated all the content from the central site etc. Now I need to set the Network Access Account for the Task Sequences to work (the boot procedure reaches the Task Sequence section and fails with the error 0x80004005), but I don't have the password for the currently used Network Access Account. I was advised not to use 2 different accounts on the central and primary sites as in case of a disaster, the clients deployed with the failed server wouldn't be able to communicate with the DR SCCM server. Thanks Zoran
July 22nd, 2011 10:15pm

If you are talking about the "Network Access Account" password set in the SCCM console then you have to change it manually for all the primary sites in ur environment? If you are talking about the communication of clients etc using Network Access Account then that is entirely depends upon Active Directory. Anoop C Nair - This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
July 22nd, 2011 10:58pm

Hi An00p, I'm talking about the account set as Network Access Account in SCCM>Site Database>Site Management>(central)site_name>Site Settings>Client Agents>Computer Client Agent. What I learnt is that this account, once set in the central SCCM, is used by the clients (the hosts deployed with this SCCM server for any future communication (e.g you want to install or remove a piece of software from those clients, inventory etc). So, the question is: if I change the password for this account in AD and change it in the Computer Client Agent properties on the central SCCM, will the clients deployed with this SCCM be able to talk back to this server ever again or I need to do something to make it happen? Thanks Zoran
July 22nd, 2011 11:45pm

You don't need to anything from client side. yes, the clients deployed with SCCM be able to talk back to the server with Network Access Account. But, please see the recommendation on the technet documentation Account maintenance The Configuration Manager 2007 Administrator creates and maintains the account and password. To avoid account lockouts, do not change the password on an existing Network Access account. You should create a new account and set Configuration Manager 2007 to use that account. When sufficient time has passed for all clients to have received the new account details, the old account should be removed from the network shared folders and deleted. http://technet.microsoft.com/en-us/library/bb680398.aspx Anoop C Nair - This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
Free Windows Admin Tool Kit Click here and download it now
July 23rd, 2011 12:42am

Hi An00p, That's what I was looking for. Thanks a lot for your help. Zoran
July 23rd, 2011 5:26am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics