windows-itpro-docs/devices/surface-hub/password-management-for-surface-hub-device-accounts.md

2.4 KiB
Raw Blame History

title, description, ms.assetid, keywords, ms.prod, ms.sitesec, author, ms.author, ms.topic, ms.date, ms.localizationpriority
title description ms.assetid keywords ms.prod ms.sitesec author ms.author ms.topic ms.date ms.localizationpriority
Password management (Surface Hub) Every Microsoft Surface Hub device account requires a password to authenticate and enable features on the device. 0FBFB546-05F0-430E-905E-87111046E4B8 password, password management, password rotation, device account surface-hub library jdeckerms jdecker article 07/27/2017 medium

Password management (Surface Hub)

Every Microsoft Surface Hub device account requires a password to authenticate and enable features on the device. For security reasons, you may want to change (or "rotate") this password regularly. However, if the device accounts password changes, the password that was previously stored on the Surface Hub will be invalid, and all features that depend on the device account will be disabled. You will need to update the device accounts password on the Surface Hub from the Settings app to re-enable these features.

To simplify password management for your Surface Hub device accounts, there are two options:

  1. Turn off password expiration for the device account.
  2. Allow the Surface Hub to automatically rotate the device accounts password.

Turn off password rotation for the device account

Set the device accounts PasswordNeverExpires property to True. You should verify whether this meets your organizations security requirements.

Allow the Surface Hub to automatically rotate the device accounts password

The Surface Hub can manage a device accounts password by changing it frequently without requiring you to manually update the device accounts information. You can enable this feature in Settings. Once enabled, the device account's password will change weekly during maintenance hours.

Note that when the device accounts password is changed, you will not be shown the new password. If you need to sign in to the account, or to provide the password again (for example, if you want to change the device account settings on the Surface Hub), then you'll need use Active Directory or the Office 365 admin portal to reset the password.

Important

If your organization uses a hybrid topology (some services are hosted on-premises and some are hosted online through Office 365), you must setup the device account in domain\username format. Otherwise, password rotation will not work.