SELECT 'ALTER LOGIN ' + QuoteName(name) + ' WITH CHECK_POLICY = ON;' FROM sys.server_principals WHERE [type] = 'S' -- SQL Server Logins only AND principal_id > 1 -- not sa - omit this line if you want to include it