Re: What is the criterion for 'strong password' for SQL Express SA acc

>From BOL:

Password complexity policies are designed to deter brute force attacks by
increasing the number of possible passwords. When password complexity policy
is enforced, new passwords must meet the following guidelines.

a.. The password does not contain all or "part" of the user's account
name. Part of an account name is defined as three or more consecutive
alpha-numeric characters delimited on both ends by "white space" (space,
tab, return, etc.) or any of the following characters: , . - _ #


b.. The password is at least six characters long.

c.. The password contains characters from three of the following four
categories:

a.. English uppercase letters (A - Z)

b.. English lowercase letters (a - z)

c.. Base 10 digits (0 - 9)

d.. Non-alphanumeric (For example: !, $, #, or %)



--
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm

"NotCpiP" <NotCpiP@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:39B8F38A-7EC3-4B2C-A22D-9EED1538CFFD@xxxxxxxxxxxxxxxx
> Hi, I have a project that will ask the user to provide a 'sa' account
> password, and then install the SQL Express in command line quietly by the
> SAPWD option. My question is, what is the logic to validate the 'strong
> password' for SQL Express in my program (C#) before SQL Express
> installation
> start? Thanks a lot!


.

Relevant Pages

  • Re: What Happened? Passwords all expired...
    ... really explain how the new account policy settingmade it to the DCs. ... I would strongly suggest enabling Success/Failure for Account Management ... >>>post that says "I check my GPO's and password complexity ... >>>>account logon events success and fail ...
    (microsoft.public.win2000.active_directory)
  • RE: AD Password complexity - passwords too long?
    ... randomly generated password of 12 characters, to insure that you are not ... it is possible for a non-default password filter to be added ... to a system for password management. ... AD Password complexity - passwords too long? ...
    (Focus-Microsoft)
  • Re: What Happened? Passwords all expired...
    ... account logon events success and fail ... >> expired and now are required to use password complexity. ...
    (microsoft.public.win2000.active_directory)
  • Re: Benefits and drawbacks of password complexity
    ... If I enable 6 characters (and I do not enable password complexity) they ... > requirements," which accomplishes the same thing as ... >>> passfilt, it's just a check box to accomplish the same ...
    (microsoft.public.win2000.security)
  • Enforce stronger password policy for administrator
    ... characters, password complexity not enabled. ... character passwords and change passwords every 90 days. ... enforced at domain level, and I can't enforce stronger ones at this point). ...
    (microsoft.public.security)