That's correct. Test for your situation, but you should be able to change the pwd in AD, change the pwd in Services applet (or both programmatically) and then restart SQL...

I'm with Jeff, why?

SQL Agent and PowerShell are orthogonal. They don't depend on each other. I can have an Agent Job using, or not using, PoSh. I...

+1, use guidance , and you will need to make some decision that is appropriate for your environment

Did you install the cert you created on the client? If so, you've enabled trust.

However, I do see your concern. The client should always go through the trust...

TDE should work on the subscriber. The data  comes over unencrypted, gets encrypted when written to disk. As mentioned, be aware of sizing.

How are you getting a running total when 104, 105, etc don't add to the total? Do you mean after a reset you stop?

You should have a few cases in a test that you can use to verify this works for all cases. That's what I'd do for this type of query where...

ms_foreachdb

https://www.mssqltips.com/sqlservertip/1414/run-same-command-on-all-sql-server-databases-without-cursors/

It might. The FTS engine got a lot of work in 2005/2008. Not a lot since.

Sorry, I think I left something out.

You need to programmatically:
1.  change the pwd in AD
2. change the pwd for the local service(s)

Both need to...

The Config Manager is nothing magic. You don't need to use this to set a SQL Server service account. Config manager sets
- the service properties as you would...

You must use the share path defined in Config Manager. You CANNOT use a physical path.

OK, sorry, haven't had a chance to test this, but the data can't be inserted into the temp table when encrypted. That makes sense, given the nature of this encryption....

You're attacking the problem in the wrong way. we want everything to be embedded. For example, I could do this:

select *
 from table
where  column in...

You need to either convince the auditors that these don't need to be changed (good luck) or change them. We used to have a script that would alter passwords on...