• Dr. Diana Dee (11/23/2008)

    However, in my experiments, with a SQL Server login having only CHECK_POLICY in effect (but not CHECK_EXPIRATION), when minimum age was set, I could not change the password until then, and with History set I could not change the password to the same one for as many as specified by the History.

    That implies that the quote from the article below is incorrect, which is what I used to answer the QOD. 🙁 shucks.

    http://searchsqlserver.techtarget.com/news/article/0,289142,sid87_gci1102101,00.html

    CHECK_EXPIRATION encompasses minimum and maximum password age, and CHECK_POLICY encompasses all the other policies. When you run afoul of either policy, the SQL Server login must be unlocked by the DBA, as shown shortly in an example.

    Interestingly, they included Store Passwords using reversable encryption in the list, but I don't know exactly how that would be (or if it is) implemented with 2K5.