pasword expiration for SQL logins

Question

pasword expiration for SQL logins

Gabriela Nanau

SSCommitted

Points: 1967
More actions
December 8, 2004 at 11:16 am

#87235

Hi there,
Is there any way to setup an expiration date for a SQL server login's password, something similar with Windows?
I would like to see something like "your password expired; please change it" and the access to server to be denied until the password is changed.

Thanks
Gabriela

Viewing 6 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic. Login to reply

sa24 SSCrazy Eights Points: 8027 More actions · Answer 1

Not with SQL 2000. With what i know is that SQL 2005 will by tying the logins into the local system accounts. This will fecilitate enforcing all kind of user policies.

Summer90 SSC-Dedicated Points: 32891 More actions · Answer 2

I second that from 'Veteran'. Does not exist today but will have something along those lines in SQL 2005. I have been wanting:

lock out the account after XX number of failed attempts (this would kill of hackers)

force a password change every xx days.. or something like this for specific accounts. Obviously you could not do this for accounts that a app. server uses to connect to the database otherwise the app. would fail every xx days but some user accounts this would probably be good.

Gé Brander SSCarpal Tunnel Points: 4353 More actions · Answer 3

Gé Brander

SSCarpal Tunnel

Points: 4353

December 9, 2004 at 6:29 am

#533174

Or use windows authentication, if possible.

Summer90 SSC-Dedicated Points: 32891 More actions · Answer 4

I would love to, except all of our purchased apps require a SQL Svr authenticated login to use the app.

DonaldW SSCarpal Tunnel Points: 4525 More actions · Answer 5

One issue there is that the apps probably have their passwords hardcoded somewhere, so changing the passwords in SQL Server would probably render the apps inoperative. The apps themselves should be modified to allow you to update the passwords from inside the app.

You might want to submit this to your vendor as an enhancement request, possibly intimating that it will be a requirement for contract renewal (if you have that as an option).

Don