| Author | Kirill Kravtsov (@nvarscar) |
| Availability | Windows, Linux, macOS |
Want to see the source code for this command? Check out Update-DbaServiceAccount on GitHub.
Want to see the Bill Of Health for this command? Check out Update-DbaServiceAccount.
Changes service account (or just its password) of the SQL Server service.
Reconfigure the service account or update the password of the specified SQL Server service. The service will be restarted in the event of changing the account.
The command is only supported for SQL Server engine and agent service of supported versions of SQL Server. It might fail for older versions or other services.
Update-DbaServiceAccount
[-ComputerName <DbaInstanceParameter[]>]
[-Credential <PSCredential>]
[-ServiceName] <String[]>
[-Username <String>]
[-ServiceCredential <PSCredential>]
[-PreviousPassword <SecureString>]
[-SecurePassword <SecureString>]
[-NoRestart]
[-EnableException]
[-WhatIf]
[-Confirm]
[<CommonParameters>]
Update-DbaServiceAccount
[-Credential <PSCredential>]
-InputObject <Object[]>
[-Username <String>]
[-ServiceCredential <PSCredential>]
[-PreviousPassword <SecureString>]
[-SecurePassword <SecureString>]
[-NoRestart]
[-EnableException]
[-WhatIf]
[-Confirm]
[<CommonParameters>]
PS C:\> $SecurePassword = (Get-Credential NoUsernameNeeded).Password
PS C:\> Update-DbaServiceAccount -ComputerName sql1 -ServiceName 'MSSQL$MYINSTANCE' -SecurePassword $SecurePassword
Changes the current service account's password of the service MSSQL$MYINSTANCE to 'Qwerty1234'
PS C:\> $cred = Get-Credential
PS C:\> Get-DbaService sql1 -Type Engine,Agent -Instance MYINSTANCE | Update-DbaServiceAccount -ServiceCredential $cred
Requests credentials from the user and configures them as a service account for the SQL Server engine and agent services of the instance sql1\MYINSTANCE
PS C:\> Update-DbaServiceAccount -ComputerName sql1,sql2 -ServiceName 'MSSQLSERVER','SQLSERVERAGENT' -Username NETWORKSERVICE
Configures SQL Server engine and agent services on the machines sql1 and sql2 to run under Network Service system user.
PS C:\> Get-DbaService sql1 -Type Engine -Instance MSSQLSERVER | Update-DbaServiceAccount -Username 'MyDomain\sqluser1'
Configures SQL Server engine service on the machine sql1 to run under MyDomain\sqluser1. Will request user to input the account password.
PS C:\> Get-DbaService sql1 -Type Engine -Instance MSSQLSERVER | Update-DbaServiceAccount -Username 'MyDomain\sqluser1' -NoRestart
Configures SQL Server engine service on the machine sql1 to run under MyDomain\sqluser1. Will request user to input the account password.
Will not restart, which means the changes will not go into effect, so you will still have to restart during your planned outage window.
A collection of services. Basically, any object that has ComputerName and ServiceName properties. Can be piped from Get-DbaService.
| Alias | ServiceCollection |
| Required | True |
| Pipeline | true (ByValue) |
| Default Value |
A name of the service on which the action is performed. E.g. MSSQLSERVER or SqlAgent$INSTANCENAME
| Alias | Name,Service |
| Required | True |
| Pipeline | false |
| Default Value |
The target SQL Server instance or instances.
| Alias | cn,host,Server |
| Required | False |
| Pipeline | false |
| Default Value | $env:COMPUTERNAME |
Windows Credential with permission to log on to the server running the SQL instance
| Alias | |
| Required | False |
| Pipeline | false |
| Default Value |
Username of the service account. Cannot be used with -ServiceCredential. For local service accounts use one of the following usernames omitting the -SecurePassword parameter:
LOCALSERVICE
NETWORKSERVICE
LOCALSYSTEM
| Alias | User |
| Required | False |
| Pipeline | false |
| Default Value |
Windows Credential object under which the service will be setup to run. Cannot be used with -Username. For local service accounts use one of the following usernames with empty password:
LOCALSERVICE
NETWORKSERVICE
LOCALSYSTEM
| Alias | |
| Required | False |
| Pipeline | false |
| Default Value |
An old password of the service account. Optional when run under local admin privileges.
| Alias | |
| Required | False |
| Pipeline | false |
| Default Value | (New-Object System.Security.SecureString) |
New password of the service account. The function will ask for a password if not specified. MSAs and local system accounts will ignore the password.
| Alias | Password,NewPassword |
| Required | False |
| Pipeline | false |
| Default Value | (New-Object System.Security.SecureString) |
Do not immediately restart the service after changing the password.
Note that the changes will not go into effect until you restart the SQL Services
| Alias | |
| Required | False |
| Pipeline | false |
| Default Value | False |
By default, when something goes wrong we try to catch it, interpret it and give you a friendly warning message.
This avoids overwhelming you with "sea of red" exceptions, but is inconvenient because it basically disables advanced scripting.
Using this switch turns this "nice by default" feature off and enables you to catch exceptions with your own try/catch.
| Alias | |
| Required | False |
| Pipeline | false |
| Default Value | False |
Shows what would happen if the command were to run. No actions are actually performed.
| Alias | wi |
| Required | False |
| Pipeline | false |
| Default Value |
Prompts you for confirmation before executing any changing operations within the command.
| Alias | cf |
| Required | False |
| Pipeline | false |
| Default Value |