Creating Managed Accounts in SharePoint 2010

If going to Central Administration | Security | Configure Managed Accounts and Registering a new account (with Automatic Password Change) fails with the following error

Access denied.  Only machine administrators are allowed to create administration service job definitions of type: Microsoft.SharePoint.Administration.SPGeneratePasswordJobDefinition, Microsoft.SharePoint, Version=, Culture=neutral, PublicKeyToken=71e9bce111e9429c.


You will no longer be able to access the Configure Managed Accounts screen until you remove the offending account you just tried to add, this is all you will get

Object reference not set to an instance of an object.


PowerShell to the rescue!  Open a SharePoint 2010 PowerShell Command Prompt and enter the following command:


You should see a list of all your managed accounts…and one that has an Automatic Change value of True.  Remove the offending account by executing the following command:

Remove-SPManagedAccount DOMAIN\ServiceAccountName

Now you can go back into the list of managed accounts in Central Administration and Add the account again without Automatic Password Change configured.

About wesmacdonald

Wes MacDonald is a Visual Studio ALM MVP, PSD, MCT and a Principal Consultant for LIKE 10 INC., a SharePoint Server, Visual Studio and Team Foundation Server Consulting Firm providing premium support and guidance services.

No comments yet... Be the first to leave a reply!

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: