While the script can sometimes run while the service is active, best practices—and Symantec documentation—strongly recommend stopping the management service before modifying credentials. This prevents database locks or corruption.
Broadcom provides a companion script: SetSEPMPassword.exe (available with support login). This allows scheduled password changes via automated tasks without locking the account. Symantec Endpoint Protection Manager 14 Resetpass.bat
| Feature | Resetpass.bat | Restoring from Database Backup | | :--- | :--- | :--- | | | 2 minutes | 30+ minutes | | Data loss risk | None | High (loss of recent events/policies) | | Technical skill needed | Low | High (SQL queries) | | Platform support | Embedded & SQL | SQL Only | | Official Symantec method | Yes | Yes (Emergency only) | While the script can sometimes run while the