pasword expiration for SQL logins

  • Hi there,

    Is there any way to setup an expiration date for a SQL server login's password, something similar with Windows?

    I would like to see something like "your password expired; please change it" and the access to server to be denied until the password is changed.

     

    Thanks

    Gabriela

  • Not with SQL 2000. With what i know is that SQL 2005 will by tying the logins into the local system accounts. This will fecilitate enforcing all kind of user policies.

  • I second that from 'Veteran'. Does not exist today but will have something along those lines in SQL 2005. I have been wanting:

    lock out the account after XX number of failed attempts (this would kill of hackers)

    force a password change every xx days.. or something like this for specific accounts. Obviously you could not do this for accounts that a app. server uses to connect to the database otherwise the app. would fail every xx days but some user accounts this would probably be good.

     

  • Or use windows authentication, if possible.

  • I would love to, except all of our purchased apps require a SQL Svr authenticated login to use the app.

  • One issue there is that the apps probably have their passwords hardcoded somewhere, so changing the passwords in SQL Server would probably render the apps inoperative.  The apps themselves should be modified to allow you to update the passwords from inside the app. 

    You might want to submit this to your vendor as an enhancement request, possibly intimating that it will be a requirement for contract renewal (if you have that as an option). 

    Don

Viewing 6 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic. Login to reply