Every 21 days (half of the expiration period), you must repeat step 4 by resetting the password and configuring the account that is not currently being used to be the service account.