Post reply

Password

  • December 9, 2005 at 9:16 am

    #111108

    Is there any way?

    How can I enforce user to type password for 9 character long and should contain atleast three special character or numeric in sql server.

    Thanks

    Nita

  • December 9, 2005 at 9:38 am

    #608721

    SQL Server 2005 does have support to enforce policies such as expiration date and so forth.  However, I am unaware of such functionality in previous versions.  I have have come upon some articles on the net that show some ways to do this through udf's, but I would not recommend them. 

    The best and most secure approach would be to use NT authentication, or if accounts are being created programatically then enforce set rules through the code by way of checks.

  • December 9, 2005 at 9:45 am

    #608724

    I do not believe there is a way to do this in ss2k and before. ss2k5 does enforce this, but I believe it requires Windows 2003 to do so.

  • December 9, 2005 at 10:37 am

    #608761

    Echoing earlier comments... without modifying sp_password in SQL Server 2000 and earlier, no (which brings the SQL Server into an unsupported configuration). SQL Server 2005 can if it's running on a Windows Server 2003 system (not Windows 2000) and the SQL Server login is set to check policy. Windows logins, regardless of SQL Server platform do so based on the account policy for the domain, but this goes without saying.

    K. Brian Kelley
    @kbriankelley

Viewing 4 posts - 1 through 3 (of 3 total)

You must be logged in to reply to this topic. Login to reply