An approach to automate SCOM service account password change – part 2/3: prerequisites and execution steps

This is part two of my little blog series about how to change SCOM service accounts. In part one I talked about the challenges and the overall process. This part explains the necessary prerequisites and steps to perform the automated password change. Prerequisites So what prerequisites do we need and why? Software (on a workstation…


An approach to automate SCOM service account password change – part 1/3: background and process

Changing SCOM Service account passwords can be challenging and complex. MVP Marnix Wolf has written an excellent blog post about all necessary steps we have to take to change passwords in all the different locations like AD, Windows OS (Service), RunAs accounts, SQL Reporting configuration etc. But as SCOM is a powerful and mighty tool…


Quick note from the field: SDK/DAS Service account needs SCOM admin role membership

Configuring a high secure SCOM Management Group with the least amount of privileges possible can be challenging. Thanks to my colleagues Kevin Holman and Sergio Carrilho there is an excellent document which describes all accounts and their required access rights: SCOM Security Account Matrix Please be aware, that you also assign the SDK/DAS service account…


Quick note from the field: Access rights for set-scomlicense

Just in case you try to set a license for a SCOM Management Group with set-scomlicense and the Cmdlet hangs forever:Make sure that you execute set-scomlicense in an elevated Shell: On a SCOM Management Server (preferably the RMS emulator) With a user account that have this access rights: local Admin rights on the Management Server…