Using the Windows Agent to handle password syncs for non domain win2008 servers which are firewalled off.
I'm using the local Administrator account as the build-in window's service accounts seem not to have the privs to change passwords.
Now the problem I have is how does this setup handle the changing of the service account's password by PMP itself ? The security policy we have to conform to specifies that any privileged accounts need to be changed every 30 days. This is the reason we bought PMP in the first place ;)
I've tried testing this when the service account is local admin and the windows Agent's save password credentials appear not to be changed when the agent changes the local administrator's password, even though the agent knows it's running under an account whose password has just been changed.
I've had a chat with one of your support agents who was very helpful in explaining the restriction, so now I'm searching for a solution and hopefully other users have come across this problem and corrected it.
Possible solutions:
1) Have the Windows Agent update the stored password for the Agent service when it detects a password change go through for the account it's running under. This seems the cleanest solution
2) Keep track of the non domain boxes outside PMP and use a separate tool to change and restart the windows agent once the service password has been changed. This seems a major fag, but might be the quickest way to find a solution.
3) something else ??