Join Log in
Score:0
avatar Server

Error trying to reset service account password

jo flag
InteXX

Some background:

I installed Windows Server Essentials and ran the Essentials Configuration Wizard, which created a new AD forest with a single domain.

However, I needed the AD from a previously-replicated DC for that new Essentials server. What I had here was two separate forests, each with a single domain. Of course that wouldn't work. So I demoted the WSE server, joined the domain of the previously-replicated DC, and then promoted the WSE server into a DC.

Everything worked fine, except for one little hitch: the service account for the WSE Media Streaming Service now has mismatched passwords. The service is configured with the new password that was created when I ran the wizard, and the service account has the old password from the previously-replicated AD. So the service fails to start, leaving nasty nasties in the System Event Log (specifically, EventID 7038 - bad password).

Well and good, I told myself. We'll just reset that password and we'll be up and running in no time.

Not so fast.

Here's the cmdlet I used:

Get-ADServiceAccount -Identity MediaAdmin | Reset-ADServiceAccountPassword

Here's the error:

Object reference not set to an instance of an object.

Now isn't that strange?

There's no question that the MediaAdmin service account exists:

enter image description here

How can I reset that service account password so that I can start the service?

105
0 + 0
Jevgenij Martynenko avatar
us flag
Jevgenij Martynenko
Have you checked this article? https://docs.microsoft.com/en-us/troubleshoot/windows-server/deployment/post-deployment-configuration-task-fail
0
Reply
jo flag
InteXX
I have, yes, thanks. That's for EventID 7041, logon as a service. I'm getting 7038, bad password. I updated my question accordingly.
1
Reply
Score:0
Daniel avatar Server
in flag
Daniel

Have you verified that you do not have a replication issue? (dcdiag /q)

Have you assigned the service account to AD computer object and installed it on the new server? If not, this could be a solution to your problem.

Run this with Domain Admin credentials:

Add-ADComputerServiceAccount -Identity <NewServer> -ServiceAccount MediaAdmin

Run this on <NewServer>

Install-ADServiceAccount -Identity MediaAdmin

Then open the service settings on the "Log On" tab and re-enter the MSA account name. Leave the password blank.

0 + 0
jo flag
InteXX
I'm pretty sure my goof was running the Essentials Configuration Wizard BEFORE joining the domain and promoting to a DC. I've learned since that we're supposed to do that after the fact. I hope to get to the task of redoing everything by the end of the week, and I'll post my results here.
0
Reply
ธงชาติไทย
Elon Musk
I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.