Wednesday, March 21, 2012

force password for sql login

Hi all,
I am using third party application that can only use sql authentication. If
we use windows authentication it will accept any password once the username
is correct. If we are force to use sql authentication, is there a script or a
way that we can force the sql users to change password every 3 months for
example. Any help will be greatly appreciated.Hi,
If you are using SQL Server 2005, you can enforce your windows password
policy.
But in case you are using SQL Server 2000, you will have to write a few
proc's to maintain things like password expiry etc. I am sure there are
articles regarding this. In fact I have gone thru' one, but dont have the
link at the moment.
Thank you.
Regards,
Karthik
"deseotu5" wrote:
> Hi all,
> I am using third party application that can only use sql authentication. If
> we use windows authentication it will accept any password once the username
> is correct. If we are force to use sql authentication, is there a script or a
> way that we can force the sql users to change password every 3 months for
> example. Any help will be greatly appreciated.|||Password and user policy is incorporated only from SQL 2005. If you have SQL
2005 then you can
enable the "Enforse Password Expiry" option for the required logins.
For SQL 2000 or older versions do not have Password policies for SQL Server
logins. The only way is
by 2 layer of authentication. First layer will be SQL Server and then it
will be creating application tables for authentication with a modified date
column. So verify the application table whne the password update happend
last time and based on that force the application change password
or expiry.
Thanks
Hari
SQL Server MVP
"deseotu5" <deseotu5@.discussions.microsoft.com> wrote in message
news:3C08100E-B7A7-4674-B424-48C29989F787@.microsoft.com...
> Hi all,
> I am using third party application that can only use sql authentication.
> If
> we use windows authentication it will accept any password once the
> username
> is correct. If we are force to use sql authentication, is there a script
> or a
> way that we can force the sql users to change password every 3 months for
> example. Any help will be greatly appreciated.

No comments:

Post a Comment