windows-itpro-docs/devices/surface-hub/password-management-for-surface-hub-device-accounts.md

title, description, ms.assetid, keywords, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, author

title	description	ms.assetid	keywords	ms.prod	ms.mktglfcycl	ms.sitesec	ms.pagetype	author
Password management (Surface Hub)	Every Microsoft Surface Hub device account requires a password to authenticate and enable features on the device.	0FBFB546-05F0-430E-905E-87111046E4B8	password, password management, password rotation, device account	w10	manage	library	surfacehub, security	TrudyHa

Password management (Surface Hub)

Every Microsoft Surface Hub device account requires a password to authenticate and enable features on the device. For security reasons, you may want to change ( or "rotate") this password. However, if the device account’s password changes, the device account on the Surface Hub will be expired, and all features that depend on the device account will be disabled. You can update the device account’s password on the Surface Hub from the Settings app to re-enable these features.

To prevent the device account from expiring, there are two options:

1. Set the password on the device account so it doesn't expire.
2. Allow the Surface Hub to automatically rotate the device account’s password.

Setting the password so it doesn't expire

Set the device account’s PasswordNeverExpires property to True. You should verify whether this meets your organization’s security requirements.

Allow the Surface Hub to manage the password

The Surface Hub can manage a device account’s password by changing it frequently without requiring you to manually update the device account’s information from the Surface Hub. You can enable this feature in Settings. Once enabled, the device account's password will change daily.

Note that when the device account’s password is changed, you will not be shown the new password. If you need to sign in to the account, or to provide the password again (for example, if you want to change the device account settings on the Surface Hub), then you'll need use Active Directory to reset the password.

For your device account to use password rotation, you must meet enter the device account’s information when you set up your Surface Hub (during First-run experience), or in Settings. The format you'll use depends on where your device account it hosted:

Environment	Required format for device account
Device account is hosted only online	username@contoso.com
Device account is hosted only on-prem	DOMAIN\username
Device account is hosted online and on-prem (hybrid)	DOMAIN\username