Lock service accounts if tried with wrong passwords thrice

  • Hello

    Do we have any easy method to lock out SQL Login accounts if the password is typed wrongly for three times consequently?

    Thanks.

  • This is a Windows level setting, and usually there is a limit. I think it's 3, but it might depend on your particular OS version and AD settings.

    I might set it to 2, myself. If I ever need to work on service accounts, I just reset the pwd. Note that I also make sure I have 1 account = 1 service.

  • Thanks Steve. But here in this case it is required to check ":SQL Login accounts", not windows. Can this also work through group policy settings change?

    Thanks.

  • In my case it is just SQL Account but not the "domain account"..

    Thanks.

  • SQL-DBA-01 (3/3/2016)


    In my case it is just SQL Account but not the "domain account"..

    When you create sql accounts and check " Enforce Passoword Policy", local windows policies on that server will apply to sql accounts.

  • Awesome....Thnx..Just wanted to be double sure

    Thanks.

  • SQL-DBA-01 (3/3/2016)


    Awesome....Thnx..Just wanted to be double sure

    Easy to test, create a sql account with the policy on and type 3 bad passwords and see if it gets locked out.

  • I'm confused. Service accounts are Windows accounts only. If you're speaking of logins in SQL Server, then follow the advice above with regards to password policy

Viewing 8 posts - 1 through 7 (of 7 total)

You must be logged in to reply to this topic. Login to reply