Home Forums SQL Server 2008 Security (SS2K8) Enabling "Enforce password expiration" on an account with an old password RE: Enabling "Enforce password expiration" on an account with an old password

  • jasona.work (11/1/2013)


    Steve & Nadrek,

    I appreciate the information, but it still hasn't answered my question:

    If I enable "check password expiration", when the account in question tries to login to the SQL server the next time, the user will be informed that their password has expired and must be changed, correct?

    Again, I do appreciate the responses.

    Yes you are right. If you don't know where the password would need to be changed, I would never put expiration on. For SQL accounts used as service accounts for applications, I personally would never expire the password. It is inevitable that one day you will get disruption to the service, whether that is in 1 day or 1 month.

    What is the reason that you need to make the password expire? Just local policy? If it is some security person telling you to do so, explain the situation above, service disruption will occur.