force password for sql login

Hi all,
I am using third party application that can only use sql authentication. If
we use windows authentication it will accept any password once the username
is correct. If we are force to use sql authentication, is there a script or a
way that we can force the sql users to change password every 3 months for
example. Any help will be greatly appreciated.Hi,
If you are using SQL Server 2005, you can enforce your windows password
policy.
But in case you are using SQL Server 2000, you will have to write a few
proc's to maintain things like password expiry etc. I am sure there are
articles regarding this. In fact I have gone thru' one, but dont have the
link at the moment.
Thank you.
Regards,
Karthik
"deseotu5" wrote:
> Hi all,
> I am using third party application that can only use sql authentication. If
> we use windows authentication it will accept any password once the username
> is correct. If we are force to use sql authentication, is there a script or a
> way that we can force the sql users to change password every 3 months for
> example. Any help will be greatly appreciated.|||Password and user policy is incorporated only from SQL 2005. If you have SQL
2005 then you can
enable the "Enforse Password Expiry" option for the required logins.
For SQL 2000 or older versions do not have Password policies for SQL Server
logins. The only way is
by 2 layer of authentication. First layer will be SQL Server and then it
will be creating application tables for authentication with a modified date
column. So verify the application table whne the password update happend
last time and based on that force the application change password
or expiry.
Thanks
Hari
SQL Server MVP
"deseotu5" <deseotu5@.discussions.microsoft.com> wrote in message
news:3C08100E-B7A7-4674-B424-48C29989F787@.microsoft.com...
> Hi all,
> I am using third party application that can only use sql authentication.
> If
> we use windows authentication it will accept any password once the
> username
> is correct. If we are force to use sql authentication, is there a script
> or a
> way that we can force the sql users to change password every 3 months for
> example. Any help will be greatly appreciated.

force password for sql login

Hi all,
I am using third party application that can only use sql authentication. If
we use windows authentication it will accept any password once the username
is correct. If we are force to use sql authentication, is there a script or
a
way that we can force the sql users to change password every 3 months for
example. Any help will be greatly appreciated.Hi,
If you are using SQL Server 2005, you can enforce your windows password
policy.
But in case you are using SQL Server 2000, you will have to write a few
proc's to maintain things like password expiry etc. I am sure there are
articles regarding this. In fact I have gone thru' one, but dont have the
link at the moment.
Thank you.
Regards,
Karthik
"deseotu5" wrote:

> Hi all,
> I am using third party application that can only use sql authentication. I
f
> we use windows authentication it will accept any password once the usernam
e
> is correct. If we are force to use sql authentication, is there a script o
r a
> way that we can force the sql users to change password every 3 months for
> example. Any help will be greatly appreciated.|||Password and user policy is incorporated only from SQL 2005. If you have SQL
2005 then you can
enable the "Enforse Password Expiry" option for the required logins.
For SQL 2000 or older versions do not have Password policies for SQL Server
logins. The only way is
by 2 layer of authentication. First layer will be SQL Server and then it
will be creating application tables for authentication with a modified date
column. So verify the application table whne the password update happend
last time and based on that force the application change password
or expiry.
Thanks
Hari
SQL Server MVP
"deseotu5" <deseotu5@.discussions.microsoft.com> wrote in message
news:3C08100E-B7A7-4674-B424-48C29989F787@.microsoft.com...
> Hi all,
> I am using third party application that can only use sql authentication.
> If
> we use windows authentication it will accept any password once the
> username
> is correct. If we are force to use sql authentication, is there a script
> or a
> way that we can force the sql users to change password every 3 months for
> example. Any help will be greatly appreciated.

Force Encryption Login not working

Hi,
i've enabled the certification authentication login i use SQL 2K5 ENT
my problem is like that: in the client network utility i check the Force protocol encryption and connect
to the server the client can't connect because he doesn't have the certificate install on his machine which it's OK.
the problem is when i remove the Force protocol encryption on the client he connect successfully without the
certificate install on his machine or any thing.
i double check that on the server i've YES on the Force Encryption in the protocols For MSSQLSERVER.
why is that?

THX

Hi Avi,

To clarify, SQL Server does not support any certificate authentication -- certificates are used to facilitate SSL encryption only. When encryption is forced on the client-side, the client will perform server validation to ensure that the certificate came from the correct host. In order for this validation to succeed, the client must trust the root signing authority of the certificate. If the server, and not the client, enforces encryption, then the client will not perform server validation. Furthermore, if a certificate hasn't been provisioned on the server machine, the server will use its self-generated cert for channel encryption. Obviously, the self-generated cert would fail server validation (see this post for more details: http://blogs.msdn.com/dataaccess/archive/2005/08/05/448401.aspx) so this is something to watch out for when forcing client-side encryption. I believe that this explains the behaviour that you are seeing.

Il-Sung.