Creating Managed Accounts in SharePoint 2010

If going to Central Administration | Security | Configure Managed Accounts and Registering a new account (with Automatic Password Change) fails with the following error

Access denied.  Only machine administrators are allowed to create administration service job definitions of type: Microsoft.SharePoint.Administration.SPGeneratePasswordJobDefinition, Microsoft.SharePoint, Version=, Culture=neutral, PublicKeyToken=71e9bce111e9429c.


You will no longer be able to access the Configure Managed Accounts screen until you remove the offending account you just tried to add, this is all you will get

Object reference not set to an instance of an object.


PowerShell to the rescue!  Open a SharePoint 2010 PowerShell Command Prompt and enter the following command:


You should see a list of all your managed accounts…and one that has an Automatic Change value of True.  Remove the offending account by executing the following command:

Remove-SPManagedAccount DOMAIN\ServiceAccountName

Now you can go back into the list of managed accounts in Central Administration and Add the account again without Automatic Password Change configured.

About Wes MacDonald

Wes MacDonald is a DevOps Consultant for LIKE 10 INC., a DevOps consulting firm providing premium support, guidance and services for Azure, Microsoft 365 and Azure DevOps.

No comments yet... Be the first to leave a reply!

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.

%d bloggers like this: