Hello  Experts,

We have TMG Forefront Stand Alone Array configured in a workgroup environment. The array contains 2 servers configured with NLB. We have set up a TMG service account which sychs the configuration data between nodes.

We have been asked to periodically change the passwords of TMG service account on both the servers however I personally feel that its not a good Idea to change the password periodically as I followed the following article from Richard Hicks( But this article is for the TMG setup in Domain environment whereas our TMG setup is in Workgroup environment).

http://www.isaserver.org/articles-tutorials/configuration-general/Forefront-Threat-Management-Gateway-TMG-2010-Web-Proxy-Client-Redundancy-Deep-Dive-Part3.html

Please suggest if we should :

1. Periodically change the password of Service account?  OR

2. Must set the Password of TMG service Account as "Never Expires"

Thanks & Regards

Lalit

Hello All,

Any suggestion on above question?

Regards

Lalit