Retreive ALL Service Accounts and Passwords via PowerShell

I wanted to share a script I came across that will hopefully help many others out there in the future. I recently inherited a SharePoint/Project Server environment that no one in the organization had the credentials for the Farm or any service accounts.

Not only did I find out no one had any credentials but I also found out they used the same credentials for multiple environments. This left me with the task of having to reset the password on all of the servers, services, AD, etc. but would also cause a larger outage due to cross environment use.

So through some research I found this cool little script to help me out. This will go to the secure store databases and retrieve the Farm account information and then use it to retrieve the others. I also added it as an attachment. Recover-SPManagedAccounts.ps1

#------------------------------------------------------------------------------------------

# Name: Recover-SPManagedAccounts

# Description: This script will retrieve the Farm Account credentials and show the

# passwords for all of the SharePoint Managed Accounts

# Usage: Run the script on a SP Server with an account that has Local Admin Rights

# By: Ivan Josipovic, Softlanding.ca

#------------------------------------------------------------------------------------------

#Checks if the Current PowerShell Session is running as the Administrator

if(([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] "Administrator") -eq $false){

Throw "This Script must be ran as Administrator"

}

#This section retrives the Farm Account UserName/Password from the Security Token Service Application Pool

$Farm_user = C:\Windows\System32\cmd.exe /q /c $env:windir\system32\inetsrv\appcmd.exe list apppool "SecurityTokenServiceApplicationPool" /text:ProcessModel.UserName;

$Farm_pass = C:\Windows\System32\cmd.exe /q /c $env:windir\system32\inetsrv\appcmd.exe list apppool "SecurityTokenServiceApplicationPool" /text:ProcessModel.Password;

$Credential = New-Object System.Management.Automation.PsCredential($Farm_user, (ConvertTo-SecureString $Farm_pass -AsPlainText -Force));

# This line contains the script which returns the account passwords, script is from http://ift.tt/1Dkhgjf

$GetManagedAccountPasswords = "

Add-PSSnapin Microsoft.SharePoint.PowerShell -EA 0;

function Bindings(){

return [System.Reflection.BindingFlags]::CreateInstance -bor

[System.Reflection.BindingFlags]::GetField -bor

[System.Reflection.BindingFlags]::Instance -bor

[System.Reflection.BindingFlags]::NonPublic;

}

function GetFieldValue([object]`$o, [string]`$fieldName){

`$bindings = Bindings;

return `$o.GetType().GetField(`$fieldName, `$bindings).GetValue(`$o);

}

function ConvertTo-UnsecureString([System.Security.SecureString]`$string){

`$intptr = [System.IntPtr]::Zero;

`$unmanagedString = [System.Runtime.InteropServices.Marshal]::SecureStringToGlobalAllocUnicode(`$string);

`$unsecureString = [System.Runtime.InteropServices.Marshal]::PtrToStringUni(`$unmanagedString);

[System.Runtime.InteropServices.Marshal]::ZeroFreeGlobalAllocUnicode(`$unmanagedString);

return `$unsecureString;

}

Get-SPManagedAccount | select UserName, @{Name='Password'; Expression={ConvertTo-UnsecureString (GetFieldValue `$_ 'm_Password').SecureStringValue}}";

#Writes the Script to the Public Folder (C:\Users\Public), this is required as we cant run the script inline as its too long.

Set-Content -Path "$($env:public.TrimEnd("\"))\GetManagedAccountPasswords" -Value $GetManagedAccountPasswords;

#The Script which will be ran in the new PowerShell Window running as the Farm Account, it also removes the script above which we wrote to the file system

$Script = "

`$Script = Get-Content `"$($env:public.TrimEnd("\"))\GetManagedAccountPasswords`";

PowerShell.exe -Command `$Script;

Remove-Item `"$($env:public.TrimEnd("\"))\GetManagedAccountPasswords`";

Add-PSSnapin Microsoft.SharePoint.PowerShell -EA 0;"

#Runs PowerShell as the Farm Account and loads the Script above

Start-Process -FilePath powershell.exe -Credential $Credential -ArgumentList "-noexit -command $Script" -WorkingDirectory C:\

by Kirk Alsup via Everyone's Blog Posts - SharePoint Community