This documentation is archived and is not being maintained.

ChangePassword Command

Use ChangePassword to change the password for the Team Foundation Server service account (TFSService) or the Team Foundation Server Proxy service account (TFSProxy).

Required Permissions

To use the ChangePassword command, you must be a member of the Team Foundation Administrators security group on the Team Foundation application-tier server and a member of the sysadmin security group on the SQL Server on the Team Foundation data-tier server. If you use the /proxy option, you must be an administrator on the Team Foundation application-tier and data-tier server or the proxy server. For more information, see Team Foundation Server Permissions.


Even if you are logged on with administrative credentials, you must open an elevated Command Prompt to perform this function on a server that is running Windows Server 2008. To open an elevated Command Prompt, click Start, right-click Command Prompt, and click Run as Administrator. For more information, see the Microsoft Web site.

TFSAdminUtil ChangePassword [/proxy] account newpwd




Specifies the old account name.


Specifies the new account password.




Specifies that the password settings are changed for the Team Foundation Server proxy account.

Important noteImportant Note:

We recommend that you back up the databases on the Team Foundation Server data tier server.

The ChangePassword command is used by an administrator who wants to change the password of the service account (for example, domain\TFSService). The administrator changes the password for the account and then runs this tool to update all Team Foundation servers with the new password.

The utility updates the application tier by changing application pool passwords. To apply the changes, the utility restarts the application pools and updates the Team Foundation Server Task Scheduler, also known as TFSServerScheduler service. For more information, see Visual Studio Team Foundation Server Task Scheduler.


SQL Server 2005 synchronizes its service account passwords with Active Directory; therefore, the utility does not have to modify any SQL Server passwords.

The following example shows the syntax used to change service account passwords. The utility swaps all instances of the account, ServiceAccount, to have a new account password, newPassword. The utility iterates through the service accounts and only changes those that run under the old account.

>TFSAdminUtil.exe ChangePassword ServiceAccount newPassword