Change the password for an IBM MQ Windows service for an installation running under a domain user account

As an alternative to using the Prepare IBM MQ Wizard to enter the account details of the domain user account, we can use the Computer Management panel to alter the Log On details for the installation specific IBM MQ Service.

About this task

If the IBM MQ Windows service for an installation is running under a domain user account, we can change the password for the account as follows:

Procedure

1. Change the password for the domain account on the domain controller. You might need to ask your domain administrator to do this for you.
2. Complete the following the steps to modify the Log On page for the IBM MQ service.
   1. Identify the user that the service is running under.
   2. Stop the IBM MQ service from the Computer Management panel.
   3. Change the required password in the same way that you would change the password of an individual.
   4. Go to the properties for the IBM MQ service from the Computer Management panel.
   5. Select the Log On page.
   6. Confirm that the account name specified matches the user for which the password was modified.
   7. Type the password into the Password and Confirm password fields and click OK.

   The user account that IBM MQ Windows service runs under executes any MQSC commands that are issued by user interface applications, or performed automatically on system startup, shutdown, or service recovery. This user account must therefore have IBM MQ administration rights. By default it is added to the local mqm group on the server. If this membership is removed, the IBM MQ Windows service does not work. For more information about user rights, see User rights required for an IBM MQ Windows service.

   If a security problem arises with the user account that the IBM MQ Windows service runs under, error messages and descriptions appear in the system event log.