Hi sqlnaive

You cannot use the MUST_CHANGE option without also using CHECK_EXPIRATION=ON.

Furthermore, for clarification; CHECK_EXPIRATION=ON means that the password, not the login, will expire and has to be changed regularly.

Since the login is to be used by an application, I would suggest you simply leave out MUST_CHANGE (if it's OK not to use CHECK_EXPIRATION=ON in your company). Our auditing doesn't allow the CHECK_EXPIRATION=OFF.

Kind regards

Lars Søe Mikkelsen