KB4039592 - FIX: Cannot change the password for a SQL Server service account when additional LSA protection is enabled

Applies To

SQL Server 2014 Developer - duplicate (do not use) SQL Server 2014 Enterprise - duplicate (do not use) SQL Server 2014 Enterprise Core - duplicate (do not use) SQL Server 2014 Standard - duplicate (do not use) SQL Server 2014 Service Pack 2 - duplicate (do not use) SQL Server 2016 Service Pack 1 SQL Server 2016 Developer - duplicate (do not use) SQL Server 2016 Enterprise - duplicate (do not use) SQL Server 2016 Enterprise Core - duplicate (do not use) SQL Server 2016 Standard - duplicate (do not use) SQL Server 2017 Developer on Windows SQL Server 2017 Enterprise on Windows SQL Server 2017 Enterprise Core on Windows SQL Server 2017 Standard on Windows SQL Server 2017 on Windows

Symptoms

Consider the following scenario:

You have an instance of Microsoft SQL Server installed on a computer.
You enable additional Local Security Authority (LSA) protection.

In this scenario, you can't change the password for the SQL Server service account.

Resolution

This issue is fixed in the following cumulative updates for SQL Server:

Cumulative Update 26 for SQL Server 2017

Cumulative Update 9 for SQL Server 2016 RTM

Cumulative Update 6 for SQL Server 2016 SP1

Cumulative Update 8 for SQL Server 2014 SP2

Each new cumulative update for SQL Server contains all the hotfixes and all the security fixes that were included with the previous cumulative update. Check out the latest cumulative updates for SQL Server:

Latest cumulative update for SQL Server 2017

Latest cumulative update for SQL Server 2016

Latest cumulative update for SQL Server 2014