Remote Password Changing works hand-in-hand with our Secret Expiration feature. When a Secret expires, a background process in Secret Server will automatically generate a new password - which can be customized - and set the new password on the remote account. Expiring Secrets are automatically given new passwords. We currently support changing passwords on Windows, Active Directory, Microsoft SQL Server, Unix/Linux, Sybase, and Oracle accounts.


Updating Windows Scheduled Tasks and Service Accounts

Remote Password Changing (RPC) provides immediate synchronization for Scheduled Tasks, Windows Services and IIS App Pool Users. From any RPC secret, you can keep all the dependencies up-to-date with the appropriate account information.
Examples include:

• An IIS AppPool that uses a Domain account as its identity.
• A Service Account running a Windows Service.
• A task that was scheduled to run as a particular user.

Checkout Secrets

The Checkout feature forces accountability on Secrets by granting exclusive access to a single user. If a Secret is configured for Checkout, a user can access it, but after checking it in, Secret Server automatically forces a password change on the remote machine. No other user can access a secret while it is checked out unless Unlimited Administrator Mode is enabled. This guarantees that if the remote machine is accessed using the Secret, the user who had it checked out was the only one with access to those credentials at that time.