Re: Password Security Enforcement

From: Sanjay (sanjay.dhakhwa@verizon.net)
Date: 06/25/02 

From: "Sanjay" <sanjay.dhakhwa@verizon.net>
Date: Tue, 25 Jun 2002 16:57:15 -0400

Yes, you will have to rely on Windows OS to enforce such security mechanism.
The security mechanism is often called Windows Authentication and can be
used along SQL Server Authentication (together they are called Mixed mode
security).

See books online for more details, do a search on Windows Authentication in
the Index Tab.

"John" <john.walker@tma.osd.mil> wrote in message
news:108b201c21c87$81914860$a4e62ecf@tkmsftngxa06...
> Can someone tell me if it is possible to configure MS SQL
> 2000 to support the following password security
> precautions for DBAs?
> 1. Enforce password change on initial login.
> 2. Enforce 90 da password change.
> 3. Enforce password complexity (i.e. password must be 8
> chars. long, use of a special char, etc.)
> 4. Keep a minimum 5 password history.
> 5. Lock out an account after 3 bad logon attempts.
>
> Or would the OS have to implement these password
> restrictions?
>
> Any information you provide would be most helpful and if
> any these items are able to be implemented by SQL 2000
> could you please point me in the direction of where I
> could find out how to configure SQL to do so. Thank you.