It depends on whats options you want to use. I had a tar on the same(not exactly same issue, but implications of changing default users pwds as a part of hack proofing our databases) with oracle. They were not sure, Finally they said to save the default pwds and change 'em. In case you want to use that option in future, it may not work though you reset the pwd using 'alter user' syntax. You have to run the saved passwords script to put 'em back. Thats what metalink says. Follow this interesting link for further information.

[url]http://www.orafaq.org/faqdbase.htm#DEFUSERS[/url]