Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The question says it. I am really wondering what it EXACTLY does, because I am getting from everywhere different answers.

share|improve this question
up vote 1 down vote accepted

Sharepoint 2010 has introduced the new concept of "managed accounts" - basically, it stores the encrypted credentials for whatever service accounts you specify.

Initially, the passphrase is used to encrypt the credentials for storage. When you want to do things such as add a new server to the farm (from the server itself via powershell) you will be prompted for the passphrase instead of for the username/password as in the past.

The whole concept of managed accounts allows the passwords to be changed in AD without having to change the password everywhere the account is used in SharePoint. The complexity of changing the password in the past typically meant that the SharePoint service accounts were exempt from enterprise password change policies (which is a bad thing). Managed accounts mostly alleviates this problem, and can even go so far as to automatically change the password for you before it would expire due to policy.

Here is the technet overview of the managed password feature (which the passphrase is used for...)

share|improve this answer
Thanks MattB for the fast and clear answer :D – elhombre Jun 11 '10 at 8:19

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.