SAP Service accounts password change

[Former Member]

Hi,

We are almost yet to golive. We have implemented ECC6.0(ABAP+JAVA),BI7.0,EP7.0 . During installations network team has assigned temparary password to <sid>adm,SAPService<sid> for all dev,qa, prod systems.

Now as per security reasons client wanted to change all <sid>adm,Service<sid>password before go live.

Once network team change the passwords , where all i can go and reassign.So that it will replicate to all the entries.

Should <sid>adm,SAPService<sid> require same password or can be different?

OS : Windows2003

Database: MSSQL2005

but as per my knowledge, we have to change in services only.Please suggest if you have any thoghts and experianced on this scenario

- Kristene

[Former Member]

Hi

You are best to stop the SAP systems, stop the SAP services, change the service account passwords, change the passwords for the services SAP<SID>_xx and SAPOSCOL and then restart the services.

The Java stack uses a seperate password stored in Config Tool that allows the Java stack to login to the ABAP stack. This will not be affected by changing the service account passwords.

A couple of comments regarding your situation:

1. This sort of task is not recommended just before go live

2. As with ALL CHANGES TO SAP SYSTEMS you should test the procedure in DEV, QA etc

3. It is recommended to create dedicated OU in AD that the SAP admins can create the service accounts before installation with an appropriate password

4. The Windows event log can be used to troubleshoot service logon problems

Thanks

N.P.C