How to fix an out of sync password issue in SharePoint 2010

SharePoint 2010 now stores service account passwords in the config database.  So if you attempt to change the password in the AD and on the services that use it this will break SharePoint.

 

To fix this issue do the following

1. Logon to the SharePoint 2010 server as an admin, preferably as the account used to install SharePoint
2. Open up the SharePoint PowerShell command prompt
3. Set-SPManagedAccount -UseExistingPassword -Identity DOMAINA\SPSAdmin
• Where DOMAINA\SPSAdmin is service account that had it's password changed in the AD
4. You will then be prompted for the existing\new password for "DOMAINA\SPSAdmin"
5. Run "Repair-SPManagedAccountDeployment" to verify the passwords are now in sync
6. Next do an IISRESET command
7. Run Repair-SPManagedAccountDeployment to verify that you do not get this message:
   Repair-SPManagedAccountDeployment : The password for the account DOMAINA\spsadmin, as currently stored in SharePoint, is not the same as the current password for the account within Active Directory. To fix this with PowerShell, run Set-SPManagedAccount -UseExistingPassword.

The Set-SPManagedAccount -UseExistingPassword command will update the config database and service using by this account.

SharePoint 2010 also support automatic password management for service accounts.  See Configure automatic password change for details on this feature.

 

Useful blog:

http://info.izzy.org/Blog/archive/2010/08/04/how-to-fix-an-out-of-sync-password-issue-in-sharepoint-2010.aspx