We have a managed service account running a service on a Windows 2012 R2 service. The service has a pattern of failing every 30 or 60 days (sometimes 30 days, sometimes 60 days).
One thought we had was the Managed Service Account password change might be causing the problem. From documentation we can see that the password is reset every 30 days.
Is there a way to see when the password was last reset for a Managed Service Account so we can see if it correlates with the errors we're getting?
Look at the Active-Directory attributes of the MSA. Specifically
pwdLastSet, which tells you when the password has been last changed.