Re: Enforcing strong passwords in SQL Server

From: Toni Lassila (mpao@mc-europe.com)
Date: 10/03/02 

From: mpao@mc-europe.com (Toni Lassila)
Date: 3 Oct 2002 00:01:04 -0700

"Abhishek" <abhi_narulkar@hotmail.com> wrote in message news:<71e301c263ae$8c1438b0$35ef2ecf@TKMSFTNGXA11>...
> Hi,
> I need to enforce strong passwords in SQL Server.The
> passwords should be of some minimum length and should
> contain some special characters.This should be checked
> specially for the sa account.The sa account should be
> checked for the blank passwords.

If you just want to see which SQL logins have blank
passwords, this should do it (run in master db):

select name from syslogins where password is null and
(isntname+isntgroup+isntuser) = 0

In any case, you're better off using Windows Authentication
and setting the 'sa' password to something 128 characters
long and forgetting it in the vault.

Relevant Pages

  • Re: SQL Access security from Window Application
    ... you could have your app handle authentication by emulating the ... Currently my application access the SQL using ... >System.Data.SqlClient and all forms use stored procedures. ... >passwords in a protected file but this creates a problem on remote systems ...
    (microsoft.public.dotnet.general)
  • Re: ADSI
    ... Can you provide more details on how the passwords are stored in the SQL ... However, if they are in some sort of 1 way hash format, then it might be ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Passwords getting reset?
    ... If passwords expire, this sounds like you are referring to ... If these are SQL logins, as I said, they don't expire so ...
    (microsoft.public.sqlserver.security)
  • RE: passwords in asp pages
    ... The connection to SQL should be done by NT Authentication rather than SQL ... > plaintext passwords for credentials to an sql database on ...
    (Security-Basics)
  • Re: Same encryption codes cannot decrypt password from .NET 1.0 to 2.0
    ... And those passwords are stored in my SQL ... > server. ...
    (microsoft.public.dotnet.languages.csharp)