Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

The question says it. I am really wondering what it EXACTLY does, because I am getting from everywhere different answers.

share|improve this question

1 Answer 1

up vote 1 down vote accepted

Sharepoint 2010 has introduced the new concept of "managed accounts" - basically, it stores the encrypted credentials for whatever service accounts you specify.

Initially, the passphrase is used to encrypt the credentials for storage. When you want to do things such as add a new server to the farm (from the server itself via powershell) you will be prompted for the passphrase instead of for the username/password as in the past.

The whole concept of managed accounts allows the passwords to be changed in AD without having to change the password everywhere the account is used in SharePoint. The complexity of changing the password in the past typically meant that the SharePoint service accounts were exempt from enterprise password change policies (which is a bad thing). Managed accounts mostly alleviates this problem, and can even go so far as to automatically change the password for you before it would expire due to policy.

Here is the technet overview of the managed password feature (which the passphrase is used for...)

http://technet.microsoft.com/en-us/library/ee428296.aspx

share|improve this answer
    
Thanks MattB for the fast and clear answer :D –  elhombre Jun 11 '10 at 8:19

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.