sql server service account password changed in active directory, but sql server still running

Question

The sql server service account is a domain user account. After the account password changed in active directory, I found the sql server still running. Why?

Answer 1

Hi @Buddha Li

As per Microsoft document, When you change the service startup account for the Database Engine and SQL Server Agent, the SQL Server service (the Database Engine) must be restarted for the change to take effect.

Now, why does changing the password require a restart? That's because when a process starts, it generates a security token. The token's validity depends on its password. If you change the account password on AD and for the service, the current process still keeps using the old password.

Reference - https://dba.stackexchange.com/questions/312165/how-does-sql-server-handle-the-password-change-of-the-service-account

Thank you!

Answer 2

Plain and simple: the service is already logged in. The password is only needed when you log in. Or as in this case, when the server starts.