Service Account and Password Changes
Service Account Name and Password Changes
Copyright © 2011 Sophos Limited. All
rights reserved. No part of this publication
may be reproduced, stored in retrieval
system, or transmitted, in any form or
by any means electronic, mechanical,
photocopying, recording or otherwise
unless you are either a valid licensee
where the documentation can be
reproduced in accordance with the lice nc e
terms or you otherwise have the prior
permission in writing of the copyright
owner.
Sophos and Sophos Anti-Virus are
registered trademarks of Sophos Limited.
All other product and company names
are trademarks or registered trademarks
of their respective owners.
Document version 3.2
Published January 2011
2
Service Account Name and Password Changes
Table of Contents
Sophos Service Account Name and Password Changes .............................................................. 4
Domain Controller Changes .......................................................................................................... 5
Changing the Sophos Service Standard Domain Account ..................................................................................... 5
Sophos Application Server Changes ............................................................................................. 5
Changing the Application Pools .............................................................................................................................. 5
Changing the Services ........................................................................................................................................... 6
Changing the PatchLoader and CurrentDefs Loader Scheduled Tasks ................................................................ 8
Changing the AuthGateway Server ...................................................................................................................... 10
3
Service Account Name and Password Changes
Sophos Service Account Name and Passw ord Changes
The Sophos NAC Advanced installation requires that you manually create one standard domain account on the
domain controller. The installation then uses this account name and password for all Sophos NAC Advanced
components that require an account name and password. To change the account name and/or password after the
Sophos NAC Advanced installation, you must change the account name and password information in multiple
places so that the software continues to function properly. More importantly, the changed account names and/or
passwords must match one another in all places so that software functions properly.
Important: Sophos recommends that you do not change account names and/or passwords after you have installed
Sophos NAC Advanced; however, if circumstances require these changes, use this document to complete the
changes properly.
You must change the account names and/or passwords for each of the following:
Domain Controller Changes
▪ Standard Domain Account
Note: This service account was created manually prior to Sophos NAC Advanced installation.
Sophos Application Server Changes
▪ Application Pools
Note: The Sophos NAC Advanced installation creates four application pools in Internet Information Services
(IIS): PolicyAppPool, RegistrationAppPool, ReportAppPool, and SophosComplianceManager. You must change
the accounts and/or passwords for each of the application pools.
▪ Sophos NAC Agent Report Service
▪ Sophos NAC Alert Service
▪ Sophos NAC Enforcer Report Service
▪ Sophos NAC Host Service
▪ Sophos NAC CurrentDefsLoader (Scheduled Task)
▪ Sophos NAC PatchL oader (Scheduled Task)
▪ Sophos NAC AuthGateway Server COM+ Application
4
Service Account Name and Password Changes
Domain Controller Changes
Prior to making any a ccount name and/or password changes from this section, you must log on to the appropriate
domain controller.
Changing the Sophos Servic e St a nda rd Domain Account
The Sophos NAC Advanced Installation Guide document requires that prior to installing Sophos NAC Advanced you
manually create one standard domain account on the domain controller.
1. Log on to the domain controller.
2. Access the account that was creat ed for the Sophos NAC Advanced installation.
3. As needed, change the account name and/or password.
Note: The account name and/or password changes you make for this account must be replicated on all
components of the Sophos Compliance Application Server.
4. Log off the domain controller.
Sophos Application Server Changes
Prior to making any account and/or password changes from this section, you must log on to the Sophos
Compliance Application Server.
Changing the Application Pools
1. From the Start menu, click Administrative Tools > Internet Information Services (IIS) Manager. The IIS
Manager window displays.
2. Double-click the Application Pools folder.
5
Service Account Name and Password Changes
3. Right-click the SophosComplianceManager application pool, and click Properties. Then, click the Identity
tab.
4. As needed, change the User name and/or Password fields.
5. Click Apply.
6. Repeat steps 3-5 for the PolicyAppPool, Registration A ppP oo l, and ReportAppPool.
7. From the File menu, click Exit.
Changing the Services
1. From the Start menu, click Administrative Tools > Services. The Serv ices window displays.
6
Service Account Name and Password Changes
2. Double-click Sophos NAC Agent Report Service, and click the Log On tab.
3. As needed, change the This account and/or Password fields.
Note: If you update the password, you also must confirm the password.
4. Click OK to save your changes and return to the Services window.
5. Repeat steps 2-4 for each of the following services: Sophos NAC Alert Service, Sophos NAC Enforcer Report
Service, and Sophos NAC Host Service.
6. From the File menu, click Exit.
7
Service Account Name and Password Changes
Changing the PatchLoader and CurrentDefs Loader Scheduled Tas k s
1. From the Start menu, click Control Panel > Scheduled Tasks > Sophos NAC PatchLoader. The Sophos
NAC PatchLoader window displays.
2. As needed, change the Run as field.
3. As needed, click Set password… and change the Password and Confirm password fields. Click OK to save
your changes and return to the Sophos NAC PatchLoader window.
4. Click OK to save your changes.
8
Service Account Name and Password Changes
5. From the Start menu, click Control Panel > Scheduled Tasks > Sophos NAC CurrentDefsLoader. The
Sophos NAC CurrentDefsLoader window display s.
6. As needed, change the Run as field.
7. As needed, click the Set password… button and change the Password and Confirm password fields. Click
OK to save your changes and return to the Sophos NAC CurrentDefsLoader window.
8. Click OK to save your changes.
9
Service Account Name and Password Changes
Changing the AuthGateway Server
1. From the Start menu, click Administrative Tools > Component Services. The Component Services window
displays.
2. Double-click the Computers folder, double-click the My Computer folder, and then double-click the COM+
Applications folder.
10
Service Account Name and Password Changes
3. Right-click Sophos NAC AuthGateway Server, and click Properties. Then, click the Identity tab.
4. As needed, change the User and/or Password fields.
Note: If you update the password, you also must confirm the password.
5. Click OK to save your changes and return to the Component Services window.
6. From the File menu, click Exit.
11
Loading...