PBM policy to check empty passwords

• Lou

  SSCrazy

  Points: 2929

  More actions

  January 27, 2021 at 3:06 pm

  #3838037

  Dear friends,

  Please, could you give me some ideas, how to implement

  SELECT count(*) FROM sys.sql_logins WHERE PWDCOMPARE('', password_hash) = 1 ;

  As a Policy Based Management to check in our instances, currently the empty value could not be evaluated.

  I'm using an ExecuteSQL expression, but it looks like there are an error due to the character '', I have tried double '''' charaters but still no results, in my development environment I have accounts with no passwords, and I am looking if possible to audit this kind of accounts, this way any dba could check if possible bad accounts have been created.

  Thanks

• Site Owners

  SSC Guru

  Points: 80330

  More actions

  January 28, 2021 at 3:10 pm

  #3838401

  Thanks for posting your issue and hopefully someone will answer soon.

  This is an automated bump to increase visibility of your question.