Post reply

password/authentication parameters

  • April 16, 2008 at 10:44 am

    #185544

    I know you can look at properties to tell what type of authentication is set in SQL Server, but is there a command or place to look to tell what password parameters are set?

  • April 16, 2008 at 11:39 am

    #803234

    Select SERVERPROPERTY('IsIntegratedSecurityOnly ')

    [font="Times New Roman"]-- RBarryYoung[/font], [font="Times New Roman"] (302)375-0451[/font] blog: MovingSQL.com, Twitter: @RBarryYoung[font="Arial Black"]
    Proactive Performance Solutions, Inc.     [/font]    [font="Verdana"] "Performance is our middle name."[/font]

  • April 16, 2008 at 11:58 am

    #803247

    The answer to this query is 0. Does this mean we have no restrictions set?

    Thanks very much!

  • April 16, 2008 at 8:50 pm

    #803424

    it means that you are using Mixed authentication mode instead of Windows-only authentication.

    [font="Times New Roman"]-- RBarryYoung[/font], [font="Times New Roman"] (302)375-0451[/font] blog: MovingSQL.com, Twitter: @RBarryYoung[font="Arial Black"]
    Proactive Performance Solutions, Inc.     [/font]    [font="Verdana"] "Performance is our middle name."[/font]

  • April 17, 2008 at 6:30 am

    #803641

    Thank you, I understand about Windows/mixed mode.

    I was just trying to determine if there are other password parameters that can/should be set, such as length, special characters, etc. Again thanks very much for the responses.

  • April 17, 2008 at 6:47 am

    #803654

    In SQL Server 2005 there are 2 options "Enforce password policy" and "Enforce password expiration". These 2 options are specific to SQL Server accounts. these options are just yes/no. properties for these options are controlled by windows or active directory domain. SQL server enforces the SQL server accounts with these options turned to adhere to user account policies set in Windows or the active directory that the SQL server is part of. Hope that helps.

  • April 17, 2008 at 6:55 am

    #803663

    Hi

    If you want special characters , lenght etc in passwords you are better off using Windows authentication. You can have mixed mode as your authentication mode but the users connecting to your sql server be windows users.

    Windows authentication has more security features and is also recommened by MS.

    Make sure the sa pwd is known only to a limited numer of people. 😉

    "Keep Trying"

Viewing 7 posts - 1 through 6 (of 6 total)

You must be logged in to reply to this topic. Login to reply