We changed some accounts recently and were troubled that when the old account was reset it also reset the passwords where that account was previously used. It turns out that discovery did not remove accounts that were no longer there and the password reset did not validate that the username on the service/app pool/task was the same as it when it was discovered. I'd like to request username validation feature or adding a feature to discovery that would remove dependencies from service accounts when they were not longer detected or detected as another account.
