The Setup Assistant will allow you to upgrade the required components.
- Password Change Notifier
- Sync Server
- Administration Tools
- Download the Setup Assistant.
- Save and Run the Setup Assistant on your server.
Note: By default the file is extracted to
SpecopsPasswordSync_Setup_[VersionNumber].exe to launch the
To begin, click Start Installation in the
Specops Setup Assistant dialog box, and Accept the End
User License Agreement.
Upgrade the Password Change Notifier
The Password Change Notifier must be upgraded on all domain controllers
in your Active Directory. Uninstall the existing msi on the domain
controller, and upgrade using one of the following options:
Run the new msi from
Upgrade the Password Change Notifier using the Setup Assistant on the
Deploy the Password Change Notifier through Group Policy Software
You will need to restart the domain controllers once the upgrade is
Deploy the Password Change Notifier through GPSI
Copy the MSI packages for the Password Change Notifier to a file share
in your network infrastructure.
By default, the file is extracted to:
Specops recommends using DFS shares as it permits load sharing
and location independence.
In your domain, create a new GPO and link it to the Domain Controllers
- Enter a name for the GPO, and click OK.
- Right-click the newly created GPO, and click Edit.
Expand Computer Configuration, Policies,
Right-click Software installation, and select
- Browse to the location of the msi package.
- Enable the Assign deployment option.
- Click OK to save the package.
- Restart the domain controllers.
Upgrade the Sync Server
The Sync Server synchronizes new passwords to all systems the user has
been configured to synchronize to through the
Specops Password Sync
Group Policy settings. Depending on the amount of users in your
environment, and the frequency with which they change their passwords,
you may require more than one Sync Server.
- From the Setup Assistant, click Sync Server.
- Verify that you have fulfilled the prerequisites.
To select the certificate that will be used to verify the identity of
the Sync Server to the Password Change Notifier component, click
All communications between the Password Change Notifier and
the Sync Server is SSL encrypted using the same certificate.
You can use a certificate generated by the Active Directory
Certificate Services or a self-signed certificate. If you are
using a self-signed certificate, you will need to:
Update the certificate once it expires (the certificate
will not be automatically renewed).
Import the certificate into the trusted roots container on
all the domain controllers.
Click Install. The Setup Assistant will automatically use the
correct msi-package for the local systems and install the appropriate
version of the Sync Server.
- In the Sync Server Setup Wizard, click Next.
You will be given the chance to select which Sync Providers you want
to install on the Sync Server. The default setting is to install all
the providers that are shipped with the product. If you do not want to
use a provider, click the icon next to the provider, and select
Entire Feature will be unavailable.
Note: If you want to develop your own Sync Providers for the systems used
by your organization, contact Specops Support.
- Click Next.
- Click Finish.
Upgrade the Administration Tools
Installing the Administration Tools will install the Specops Password
Sync Administration tool and the GPMC snap-in. You can use the
Administration Tool to configure system settings such as Sync Scopes,
Sync Servers, and Sync Points. You can use the GPMC snap-in to configure
Specops Password Sync policies in a Group
Policy Object. The GPO can then be applied to your entire domain or a
part of your domain.
The Administration Tools should be installed on the computer that you
want to administer the product from.
From the Setup Assistant, select
Verify that you have fulfilled the prerequisites. If you do not meet
the prerequisites, you may need to do the following:
- Install .NET Framework 4 or later.
Verify that the user running the setup assistant is an Enterprise or
- Click Install.