{"id":3651,"date":"2018-10-09T11:14:59","date_gmt":"2018-10-09T11:14:59","guid":{"rendered":"https:\/\/dbtut.com\/?p=3651"},"modified":"2018-11-25T21:35:21","modified_gmt":"2018-11-25T21:35:21","slug":"sql-server-password-policy","status":"publish","type":"post","link":"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/","title":{"rendered":"SQL Server Password Policy"},"content":{"rendered":"

 <\/p>\n

When creating a SQL Login, you can select the Enforce Password Policy option as described in my article “How To Create a Login On SQL Server(Manage Logins)<\/a>“. When you select this option, sql login uses the password policy defined on windows or domain. This article describes the password policy and how to set it.<\/p>\n

We are writing gpedit.msc to Search.<\/p>\n

<\/p>\n

 <\/p>\n

And we are coming to the following screen for Password Policy.<\/p>\n

<\/p>\n

 <\/p>\n

Here we set the parameters that appear on the right side in the Policy section.<\/p>\n

In some domains, these settings are disabled and cannot be changed locally.<\/p>\n

If this is the case, you must forward this setting to your related technical team in your company.<\/p>\n

If you can change locally, you must set these policies by following the security policy requirements of your company.<\/p>\n

You can find these policies and their explanation below.<\/p>\n

\n\n\n\n\n\n\n\n\n
Enforce password history<\/td>\nIt asks how many of the user’s previous passwords will be remembered by the system. You must set a value between 0-24. If not set, users can enter the same password as their previous password. You can set this value to 3.<\/td>\n<\/tr>\n
Maximum password age<\/td>\nHere you need to set how long passwords will be available. After this period, users will have to change their passwords.<\/p>\n

The value here is related to the information security policies in your company.<\/p>\n

If you don’t have any policy you can set it as 180 days.<\/td>\n<\/tr>\n

Minimum password age<\/td>\nYou must set the minimum time that passwords should be used without changing by the user. You can use it to prevent users from changing their passwords every hour.<\/td>\n<\/tr>\n
Minimum password lenght<\/td>\nYou can specify how many characters the password will contain at least. It should be 8<\/td>\n<\/tr>\n
Password must meet complexity requirements<\/td>\nIf you enable this option, the passwords must meet the following requirements. And I think it needs to be activated by security.<\/p>\n

The full user name cannot be in the password.<\/p>\n

More than 2 consecutive characters in the User name cannot be in the password.<\/p>\n

The password consists of at least 6 characters.<\/p>\n

It must contain uppercase letters, lowercase letters, symbols and digits.<\/td>\n<\/tr>\n

Store passwords using reversible encryption<\/td>\n\n

For authentication, some applications require the user’s password. For example, Challenge Handshake Authentication Protocol (CHAP) or Internet Authentication Services (IAS).<\/p>\n

If you are using such applications, you must activate this option. But it will weaken security as it decrypts encrypted passwords. It would be better to remain disable and find another solution.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n<\/div>\n

<\/div>\n

<\/path><\/svg><\/i> \"Loading\"<\/p>\n

<\/div>\n","protected":false},"excerpt":{"rendered":"

  When creating a SQL Login, you can select the Enforce Password Policy option as described in my article “How To Create a Login On SQL Server(Manage Logins)“. When you select this option, sql login uses the password policy defined on windows or domain. This article describes the password policy and how to set it. …<\/p>\n

<\/div>\n

<\/path><\/svg><\/i> \"Loading\"<\/p>\n

<\/div>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[3,1524],"tags":[],"class_list":["post-3651","post","type-post","status-publish","format-standard","","category-mssql","category-windows"],"aioseo_notices":[],"yoast_head":"\nSQL Server Password Policy - Database Tutorials<\/title>\n<meta name=\"description\" content=\"SQL Server Password Policy\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SQL Server Password Policy - Database Tutorials\" \/>\n<meta property=\"og:description\" content=\"SQL Server Password Policy\" \/>\n<meta property=\"og:url\" content=\"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/\" \/>\n<meta property=\"og:site_name\" content=\"Database Tutorials\" \/>\n<meta property=\"article:published_time\" content=\"2018-10-09T11:14:59+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2018-11-25T21:35:21+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/dbtut.com\/wp-content\/uploads\/2018\/10\/677.png\" \/>\n<meta name=\"author\" content=\"dbtut\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"dbtut\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/\"},\"author\":{\"name\":\"dbtut\",\"@id\":\"https:\/\/dbtut.com\/#\/schema\/person\/fc047c39e1e53dce28fc4253529ea408\"},\"headline\":\"SQL Server Password Policy\",\"datePublished\":\"2018-10-09T11:14:59+00:00\",\"dateModified\":\"2018-11-25T21:35:21+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/\"},\"wordCount\":422,\"commentCount\":1,\"publisher\":{\"@id\":\"https:\/\/dbtut.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/dbtut.com\/wp-content\/uploads\/2018\/10\/677.png\",\"articleSection\":[\"MSSQL\",\"Windows\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/\",\"url\":\"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/\",\"name\":\"SQL Server Password Policy - Database Tutorials\",\"isPartOf\":{\"@id\":\"https:\/\/dbtut.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/dbtut.com\/wp-content\/uploads\/2018\/10\/677.png\",\"datePublished\":\"2018-10-09T11:14:59+00:00\",\"dateModified\":\"2018-11-25T21:35:21+00:00\",\"description\":\"SQL Server Password Policy\",\"breadcrumb\":{\"@id\":\"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/#primaryimage\",\"url\":\"https:\/\/dbtut.com\/wp-content\/uploads\/2018\/10\/677.png\",\"contentUrl\":\"https:\/\/dbtut.com\/wp-content\/uploads\/2018\/10\/677.png\",\"width\":505,\"height\":349},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/dbtut.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"SQL Server Password Policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/dbtut.com\/#website\",\"url\":\"https:\/\/dbtut.com\/\",\"name\":\"Database Tutorials\",\"description\":\"MSSQL, Oracle, PostgreSQL, MySQL, MariaDB, DB2, Sybase, Teradata, Big Data, NOSQL, MongoDB, Couchbase, Cassandra, Windows, Linux\",\"publisher\":{\"@id\":\"https:\/\/dbtut.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/dbtut.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/dbtut.com\/#organization\",\"name\":\"dbtut\",\"url\":\"https:\/\/dbtut.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/dbtut.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/dbtut.com\/wp-content\/uploads\/2021\/02\/dbtutlogo.jpg\",\"contentUrl\":\"https:\/\/dbtut.com\/wp-content\/uploads\/2021\/02\/dbtutlogo.jpg\",\"width\":223,\"height\":36,\"caption\":\"dbtut\"},\"image\":{\"@id\":\"https:\/\/dbtut.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/dbtut.com\/#\/schema\/person\/fc047c39e1e53dce28fc4253529ea408\",\"name\":\"dbtut\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/dbtut.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/c322c32021bf651d9e103b183963c479a9c9791ead0715f4348203496c39aa54?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/c322c32021bf651d9e103b183963c479a9c9791ead0715f4348203496c39aa54?s=96&d=mm&r=g\",\"caption\":\"dbtut\"},\"description\":\"We are a team with over 10 years of database management and BI experience. Our Expertises: Oracle, SQL Server, PostgreSQL, MySQL, MongoDB, Elasticsearch, Kibana, Grafana.\",\"sameAs\":[\"http:\/\/NurullahCAKIR\"],\"url\":\"https:\/\/dbtut.com\/index.php\/author\/dbtut\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"SQL Server Password Policy - Database Tutorials","description":"SQL Server Password Policy","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/","og_locale":"en_US","og_type":"article","og_title":"SQL Server Password Policy - Database Tutorials","og_description":"SQL Server Password Policy","og_url":"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/","og_site_name":"Database Tutorials","article_published_time":"2018-10-09T11:14:59+00:00","article_modified_time":"2018-11-25T21:35:21+00:00","og_image":[{"url":"https:\/\/dbtut.com\/wp-content\/uploads\/2018\/10\/677.png","type":"","width":"","height":""}],"author":"dbtut","twitter_card":"summary_large_image","twitter_misc":{"Written by":"dbtut","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/#article","isPartOf":{"@id":"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/"},"author":{"name":"dbtut","@id":"https:\/\/dbtut.com\/#\/schema\/person\/fc047c39e1e53dce28fc4253529ea408"},"headline":"SQL Server Password Policy","datePublished":"2018-10-09T11:14:59+00:00","dateModified":"2018-11-25T21:35:21+00:00","mainEntityOfPage":{"@id":"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/"},"wordCount":422,"commentCount":1,"publisher":{"@id":"https:\/\/dbtut.com\/#organization"},"image":{"@id":"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/#primaryimage"},"thumbnailUrl":"https:\/\/dbtut.com\/wp-content\/uploads\/2018\/10\/677.png","articleSection":["MSSQL","Windows"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/","url":"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/","name":"SQL Server Password Policy - Database Tutorials","isPartOf":{"@id":"https:\/\/dbtut.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/#primaryimage"},"image":{"@id":"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/#primaryimage"},"thumbnailUrl":"https:\/\/dbtut.com\/wp-content\/uploads\/2018\/10\/677.png","datePublished":"2018-10-09T11:14:59+00:00","dateModified":"2018-11-25T21:35:21+00:00","description":"SQL Server Password Policy","breadcrumb":{"@id":"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/#primaryimage","url":"https:\/\/dbtut.com\/wp-content\/uploads\/2018\/10\/677.png","contentUrl":"https:\/\/dbtut.com\/wp-content\/uploads\/2018\/10\/677.png","width":505,"height":349},{"@type":"BreadcrumbList","@id":"https:\/\/dbtut.com\/index.php\/2018\/10\/09\/sql-server-password-policy\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/dbtut.com\/"},{"@type":"ListItem","position":2,"name":"SQL Server Password Policy"}]},{"@type":"WebSite","@id":"https:\/\/dbtut.com\/#website","url":"https:\/\/dbtut.com\/","name":"Database Tutorials","description":"MSSQL, Oracle, PostgreSQL, MySQL, MariaDB, DB2, Sybase, Teradata, Big Data, NOSQL, MongoDB, Couchbase, Cassandra, Windows, Linux","publisher":{"@id":"https:\/\/dbtut.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/dbtut.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/dbtut.com\/#organization","name":"dbtut","url":"https:\/\/dbtut.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/dbtut.com\/#\/schema\/logo\/image\/","url":"https:\/\/dbtut.com\/wp-content\/uploads\/2021\/02\/dbtutlogo.jpg","contentUrl":"https:\/\/dbtut.com\/wp-content\/uploads\/2021\/02\/dbtutlogo.jpg","width":223,"height":36,"caption":"dbtut"},"image":{"@id":"https:\/\/dbtut.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/dbtut.com\/#\/schema\/person\/fc047c39e1e53dce28fc4253529ea408","name":"dbtut","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/dbtut.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/c322c32021bf651d9e103b183963c479a9c9791ead0715f4348203496c39aa54?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/c322c32021bf651d9e103b183963c479a9c9791ead0715f4348203496c39aa54?s=96&d=mm&r=g","caption":"dbtut"},"description":"We are a team with over 10 years of database management and BI experience. Our Expertises: Oracle, SQL Server, PostgreSQL, MySQL, MongoDB, Elasticsearch, Kibana, Grafana.","sameAs":["http:\/\/NurullahCAKIR"],"url":"https:\/\/dbtut.com\/index.php\/author\/dbtut\/"}]}},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/dbtut.com\/index.php\/wp-json\/wp\/v2\/posts\/3651","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dbtut.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dbtut.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dbtut.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dbtut.com\/index.php\/wp-json\/wp\/v2\/comments?post=3651"}],"version-history":[{"count":0,"href":"https:\/\/dbtut.com\/index.php\/wp-json\/wp\/v2\/posts\/3651\/revisions"}],"wp:attachment":[{"href":"https:\/\/dbtut.com\/index.php\/wp-json\/wp\/v2\/media?parent=3651"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dbtut.com\/index.php\/wp-json\/wp\/v2\/categories?post=3651"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dbtut.com\/index.php\/wp-json\/wp\/v2\/tags?post=3651"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}