Tool to Update Connection Account Passwords Overview

Overview

Cayosoft Administrator requires Active Directory and Azure AD credentials to connect to managed domains, forests, tenants, and other managed systems. These credentials typically have high-privileged access to the Active Directory, Azure AD, and other environments. As such, these credentials must be protected.

Some companies may decide to rotate passwords for these credentials periodically. As part of that rotation process, passwords must be updated in Cayosoft Administrator.

This article describes how to update connection accounts passwords programmatically or from a command line.

How to update Active Directory connection passwords programmatically

On the machine running the Cayosoft Administrator Service:

1. Download the CayoAdmin_UpdateConnectionPasswords.txt script attached to this article, rename it to *.ps1, and place it on the machine running the Cayosoft Administrator Service.

2. Start PowerShell.exe, Windows PowerShell ISE, or a similar application.

3. Run the following command:

   Copy

   C:\Temp\CayoAdmin_UpdateConnectionPasswords.ps1 -pwdToPasswords @{"DOMAIN\Administrator"="password123_";"test@domain.com"="Password2";};

4. Where:

   • C:\Temp\ is the folder where you place the PS1 file.

   • DOMAIN\Administrator and password123_ is the AD connection account and it's a new password.

   • test@domain.com and Password2 is the Azure AD connection account, and it's a new password.

From a remote machine:

1. Ensure PS Remoting is configured on the machine running Cayosoft Administrator ServiceEnable-PSRemoting.

2. Start PowerShell.exe, Windows PowerShell ISE, or a similar application on a remote machine.

3. Run the following script:

   Copy

   $User = "Domain\User1"
   $PWord = ConvertTo-SecureString -String "User1Password" -AsPlainText -Force
   $creds = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $User, $PWord
   
   $newPasswords =@{"DOMAIN\Administrator"="password123_";"test@domain.com"="Password2"}
   Invoke-Command -ComputerName cayoadminsrv.domain.local -Credential $creds -FilePath "C:\Temp\CayoAdmin_UpdateConnectionPasswords.ps1" -ArgumentList $newPasswords

4. In this script:

   • Domain\User1 is an account to connect to a server running Cayosoft Administrator Service. This account should be a local administrator on that server.

   • User1Password is a password for Domain\User1.

   • cayoadminsrv.domain.local is the DNS name of the server running Cayosoft Administrator Service.

   • Other parameters are the same as described in the previous section.