My company supports a number of windows services which use integrated security/windows authentication to manage their connections to the database. So these windows service all run with a special domain account. We are under new rules to reset these passwords every 90 days. Are there tools or ways to automatically have these windows service passwords updated across a number of different services in a farm?
There are managed service accounts on Windows Server 2008 R2 and even better capabilities in Windows Server 2012. If you can, use these. http://technet.microsoft.com/en-us/library/hh831782.aspx
There are also commercial tools that will help you manage service accounts. They will work with older platforms where managed service accounts are not supported and will also help manage service accounts in legacy applications, COM+, configuration files and more.
Another thing these tools can do is find all the service accounts on the network and all the places they are being used. Basically lots of automation.
The tool that I have experience with is Thycotic Secret Server but there are other tools that do this too.