How to: Change the Service Account or Password for SQL Server Reporting Services
Over time, you might need to change the password of the account that you specified as the service account of the data sources for SQL Server Reporting Services when you installed Visual Studio Team System Team Foundation Server. This account is referred to as TFSReports. To make this change, you cannot use the ChangePassword argument of the TFSAdminUtil utility, as you would for the service account for Team Foundation Server (TFSService). Instead, you must use the TFSAdminUtil utility with the ChangeAccount argument and the /ra option.
You can also choose to replace the TFSReports account with another account. To make this change, you must use the TFSAdminUtil utility with the ChangeAccount argument and the /ra option. This tool updates Team Foundation servers by replacing the old TFSReports account information with the new information.
Note
The TFSAdminUtil utility does not physically create an account or change its password. It only updates Team Foundation Server to use the current credentials. The service account can be either a local or a domain account. You can script TFSAdminUtil to allow for automated updates.
For more information about required service accounts, see the topic "User Accounts Required for Team Foundation Server Setup" in the Team Foundation Server Installation Guide. For more information about the installation guide, see Installation Overview for Team Foundation Server.
Required Permissions
To perform these procedures, you must be a member of the Administrators group on the Team Foundation application-tier server and a member of the SQL Server Administrator group on the Team Foundation data-tier server. For more information about permissions, see Team Foundation Server Permissions.
In addition to these permissions, you might need to address the following requirements on a computer that is running Windows Server 2008 or Windows Vista:
To follow a command-line procedure, you might need to open an elevated Command Prompt by clicking Start, right-clicking Command Prompt, and clicking Run as Administrator.
To follow a procedure that requires Internet Explorer, you might need to start it as an administrator by clicking Start, clicking All Programs, right-clicking Internet Explorer, and then clicking Run as administrator.
To edit web.config files, you might need to start the text editor as an administrator by clicking Start, clicking All Programs, right-clicking the editor, and then clicking Run as administrator.
To access Report Manager, reports, or Web sites for SQL Server Reporting Services, you might need to add these sites to the list of trusted sites in Internet Explorer or start Internet Explorer as an administrator.
For more information, see the Microsoft Web site.
Changing the Password for the Reporting Services Account
You can run TfsAdminUtil ChangeAccount with the /ra option to change the password for the service account for Reporting Services (referred to by the placeholder account name TFSReports) for Team Foundation Server. To change the password but not the account, you specify the same account as both the old and new accounts, and you simply change the password for that account.
Note
Depending on your deployment configuration, you might need to restart Internet Information Services (IIS) after you complete this procedure for the changes to take effect.
To change the password of the service account for data sources for Reporting Services
On the application-tier server, open a Command Prompt window, and change directories to the location of the TFSAdminUtil utility.
By default, the utility is located in Drive:\Program Files\Microsoft Visual Studio 2008 Team Foundation Server\Tools.
At the command prompt, type TFSAdminUtil ChangeAccount /raOldAccountNewAccountNewPassword, and then press ENTER.
You must type the user name for the TFSReports account twice, once as the old account (OldAccount) and once as the new account (NewAccount) in addition to the new password for the account (NewPassword).
Changing the Reporting Services Service Account
Changing Team Foundation Server to use another account as the TFSReports account is more complicated than simply changing the password for an existing account. You must make several changes to Team Foundation Server before the new TFSReports account will work correctly. To change the TFSReports account, you must use the TFSAdminUtil command-line utility. The account that you intend to use must be a member of a workgroup or domain that is trusted by every computer in the deployment of Team Foundation. As part of changing the account, TFSAdminUtil grants the new TFSReports account the Log on as a service permission, although this permission is not required for TFSReports. However, it does not add the Allow log on locally permission, which is required for TFSReports to function correctly. You must manually grant that permission to the account that you want to use as the TFSReports account before you use the TFSAdminUtil ChangeAccount command. Additionally, you might want to remove the Log on as a service permission for the TFSReports account after you use the TFSAdminUtil command-line utility.
We recommend that you run Team Foundation Server in an Active Directory domain. However, you can also run it in a workgroup.
For more information about the Log on as a service permission, see the Microsoft Web site. For more information about the Allow log on locally permission, see the Microsoft Web site.
Note
Depending on your deployment configuration, you might need to restart IIS after you complete the procedure for the changes to take effect.
To assign a new reporting services service account to all Team Foundation Server services
On the application-tier server, open a Command Prompt window, and find the TFSAdminUtil utility.
By default, it is located in Drive:\Program Files\Microsoft Visual Studio 2008 Team Foundation Server\Tools.
At a command prompt, type TFSAdminUtil ChangeAccount /raOldAccountNewAccountNewPassword, and then press ENTER.
You must enter the user name for the old TFSReports account (oldAccount), in addition to the user name and password for the new account (newAccount and newPassword).
The TFSAdminUtil utility changes only those services that run under the old account.
Note
If you have configured e-mail alerts, you must either use the emailAddress parameter for the TFSAdminUtil ChangeAccount command to specify the new account from which e-mail alerts are sent, or you must manually change the web.config file. For more information, see ChangeAccount Command or How to: Configure SMTP Server and E-mail Notification Settings in the Services Web.Config File.
See Also
Tasks
How to: Change the Service Account or Password for Team Foundation Server
How to: View Team Foundation Server Services
How to: Configure Cache Security for Team Foundation Server Proxy
Concepts
Managing and Resetting Service Accounts and Passwords