Brian, thanks for a very instructive article.

One question, though:

Is there any way of changing the default for CHECK_POLICY in CREATE LOGIN to be NO, rather than YES?

I have a third-party...