Passwords for Windows SharePoint Services
Welcome Guest
|
Passwords for Windows SharePoint Services
by Pav Cherny
Home
Site Actions

About Passwords for SharePoint (SPPwd)

The SPPwd solution addresses a basic SharePoint security issue: SharePoint security accounts don't change their passwords on their own. You must change the passwords manually, yet the default admin tools are difficult to use and can cause credential encryption/decryption problems. It is also complicated to automate password changes.

Note that Microsoft has changed the security account architecture in SharePoint 2010. The new version supports managed system accounts (SPManagedAccount class), which perform the required password changes automatically. Thanks Microsoft for embracing our SPPwd idea and implementing a similar feature in the new version. Of course, this eliminates the need for my custom SPPwd component to maintain system security. For this new SPManagedAccount capability alone, I highly recommend upgrading to SharePoint 2010 as soon as it's available--simply because you get automated account management fully supported by Microsoft. For details, refer to the TechNet article "Plan automatic password change (SharePoint Foundation)."
SPPwd features at a glance:
Automates password changes for all types of SharePoint services.
Detects weak security configurations, such as application pools having access to the IIS metabase or using the farm account as the security identity.
Enforces password complexity without increasing the administrative burden.
Provides a common interface to change security account passwords in Active Directory and SharePoint.
Supports configurations with multiple SPPwd servers in a SharePoint farm.
Relies on the .NET framework and the SharePoint administrative object model.
Includes Stsadm.exe command extensions, a Windows application as well as application pages for SharePoint 3.0 Central Administration, and a SharePoint-integrated Windows service.
External Links
Site Content ©
Warning: getdate() [function.getdate]: It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected 'America/Chicago' for 'CDT/-5.0/DST' instead in /home/b69s0cu4/public_html/sppwd.com/content/copyright.html on line 11
2013 SPPwd.com. All rights reserved.