TfsConfig accounts /change|add|set|delete|updatePassword|resetOwner /accountType: /account: /password: /sqlInstance: /databaseName: ...

TfsConfig accounts /change|add|set|delete|updatePassword|resetOwner
      [/accountType:]
      [/account:] 
      [/password:] 
      [/sqlInstance:] 
      [/databaseName:]
      [/continue]
      [/usesqlalwayson]

       Used to manage the server accounts.

       EXAMPLES
       --------
       TfsConfig accounts /updatePassword /account:domain\user 
                          /password:Password       
       TfsConfig accounts /change /accountType:applicationTier 
                          /account:domain\user /password:Password
       TfsConfig accounts /change /accountType:applicationTier 
                          /account:"NT Authority
etwork Service"

       OPERATION
       ---------
       UpdatePassword: Updates the password on the existing account.
                       Updates all accountTypes that run as the given account.
       Change:         Adds the new account to necessary resources and 
                       then sets the service to use it.
                       This does not remove the old account from the resources.
       Add:            Only adds the new account to the necessary resources.
                       Useful for NLB scenarios.  Use the continue flag
                       if some collections are unreachable.  Add can be run
                       again later to update any missed collections.
       Set:            Only sets the service to use an account already 
                       added to the resources.  Useful for NLB scenarios.
       Delete:         Removes the account from all resources.
                       Precautions should be used when deleting an account 
                       since it can cause other servers to get denied service.
       ResetOwner:     If the databases are restored as part of a move, clone,
                       or disaster recovery the database owner can switch to 
                       the admin restoring the server.  This option iterates
                       through all databases and sets the dbo login to the 
                       current owner.

       ACCOUNTTYPE
       -----------
       AdminConsole:        Administration Console Users are users that have 
                            been granted the minimum permissions across
                            various resources to use the console. 
       ApplicationTier:     Changes the service account on the appPool 
                            for the core web services.
       Proxy:               Changes the service account on the appPool for 
                            the proxy web services.
       ReportingDataSource: Changes the account the reports use to access 
                            the reporting data.

       The sqlInstance and databaseName are only appropriate for use when
       adding an account to databases before the application tier is 
       configured. This is primarily useful in disaster recovery scenarios 
       where another account is needed before running the 
       AT Only configuration wizard.

       The continue option is used when adding or changing an account.  For
       those operations, the account is changed in each collection database.
       If continue is supplied, it will continue if a collection is 
       unreachable.  It can be run again when they are reachable.

       The UseSqlAlwaysOn option should be used if your databases are on a
       Sql Server High Availability AlwaysOn Availability Group.  It is only
       applicable if SqlInstance and Database are supplied.  If configured,
       it is read from the web.config.  This option sets MultiSubnetFailover
       in the connection string.

       Note: The accounts must be in domainName\userName format.  For system
       accounts, you must use quotes around the full account name 
       (for example, "NT Authority
etwork Service"). System accounts do not 
       require a password.