If you are having service account issues, consider the following:
- Is the service account properly authorized to access the system? In a common setup, sudo is used to elevate the service account's privileges on the system.
- Has the service account been locked out or disabled?
- Is the service account configured to allow remote logon?
A service account needs sufficient permissions to edit the passwords of other accounts. For more information, see About service accounts.
To resolve incorrect or insufficient service account privileges
- Verify that the service account has sufficient permissions on the asset.
- Perform Test Connection to verify connection.
- Attempt to manually check, change, and set password or SSH key again on the account that failed.
If the asset is running a Windows operating system, a local account password or SSH key check, change, or set can fail when you are using an asset that is configured with a service account with Administrative privileges, other than the built-in Administrator.
Before SPP can change local account passwords or SSH keys on Windows systems, using a service account that is a non-built-in administrator, you must change the local security policy to disable the Run all administrators in Admin Approval Mode option. For more information, see Change password or SSH key fails.