In a Windows environment how do you address the following issues with service accounts?
- Regular Password changes - with single service accounts used on multiple machines how do you regularly change passwords without significant outage periods? Do you tend just to never change them?
- Keeping track of passwords - by necessity multiple people need to know these, how do you record the passwords whilst keeping them reasonably secret?
- To what point do you use the same account across multiple machines / services? How do you track what account is being used where? Any tools to help with this?
- Has anyone found any good resources for appropriate minimum permission settings for common service account requirements for applications such as SQL Server, Sharepoint etc.