Energy Policy Act Of 2005
Feb 1, 2007
Hello,
Does the Energy Policy Act of 2005 affect SQL Server 2005 and SQL server 2000 running on windows 2003 sp1 and windows 2000 sp4 respectively...
Thanks in advance.
ADVERTISEMENT
SQL 2005 && Windows Password Policy
Mar 13, 2006We run a few shared hosting servers in the UK, now we used to run mssql 2000 and moved to 2005 in december 2005.
Microsoft SQL 2005 9.00.1399.06
Microsoft SQL Server Management Studio 9.00.1399.00
Microsoft Analysis Services Client Tools 2005.090.1399.00
Microsoft Data Access Components (MDAC) 2000.086.1830.00 (srv03_sp1_rtm.050324-1447)
Microsoft MSXML 2.6 3.0 6.0
Microsoft Internet Explorer 6.0.3790.1830
Microsoft .NET Framework 2.0.50727.42
Operating System 5.2.3790
We were in the process of improving security on some of our new servers, in the windows password policies settings we enabled the following
minimum password length = 6 characters
Password must meet complexity requirments = enabled
sql 2005 authentification was set in mixed mode, but we have tried windows authentification only as well.
Now when you try and add a new user even if the password meets all requirments you get an error password is to short etc, we used sql managment studio both manually creating a user and scripting with sql, both with the same result.
In the shared hosting environment we need passwords to be secure, the only way we can get sql users to be created is to disable windows password policies which causes security problems.
We would prefer to use sql authentification not windows but even when we use sql authent it still seems to use the windows password policy and the same error occurs
has anyone else found this problem?
could do with a fix asap!
Sql 2005 Password Policy Setting
Oct 4, 2006What are the exact requirements implied by the sql 2005 option:
"Password Must Meet Complexity Requirements "
TIA,
Barkingdog
P.S. I found this one:
-Cannot contain all or part of the username
-Must be at least 6 characters long
-Contain 3 of the 4 following character groups
- A to Z
- a to z
- 0 to 9
- Special Characters i.e. ! ^ $ *
and I have also found
"At least 7 characters in length"
Combines letters. numbners, and symbolds
Is not a dicitonary word, name of a command, person's name or user's account name
As the saying goes "close, but no cigar!"
SQL 2005 - Ignore Policy To Allow Blank Password
Feb 6, 2006I've legacy code that requires a blank password for a SQL Server login.
This works fine on 2000 or 7.
How can you allow blank passwords on SQL Server 2005 without changing the windows policy?
Is there a stored procedure to do this?
I know you can now use CREATE LOGIN and set CHECK_POLICY to no on SQL 2005 when creating logins, but this needs to run on SQL Server 7/2000 and so its using sp_addlogin.
(NB: I can't easily change the legacy code to work conditionally on SQL Server 2005)
Changing SQL 2005 Password Policy Not Working
Feb 19, 2007I have modified the Security Settings>Account Policies>Password Policy on my PC as follows:
Minimum password length: 10 characters
Password must meet complexity requirements: Enabled
However, when creating a login within SQL Server 2005, which does not adhere to the amended policy, this does not seem to be taken into account:
CREATE LOGIN testlogin WITH PASSWORD='a',
DEFAULT_DATABASE=[master],
DEFAULT_LANGUAGE=[us_english],
CHECK_EXPIRATION=ON, CHECK_POLICY=ON
have tried restarting the SQL Server and rebooting the PC, but this does not solve the problem.
Disable Password Policy Enforcement SQL Server 2005
Jun 20, 2006Is there a way to do this at the server level?
Thanks
SQL Server 2005 - Changing Passwords With POLICY Enabled
Jun 22, 2007Using SQL Server 2005 SP2 std edition on Windows 2003 R2 SP2 x64 std edition I'm allowed to break the password policy.
To reproduce this behaviour as a system administrator run...
create login testuser with password='p'
This creates a login with the default of POLICY enabled ('Enforce Password Policy' check box is checked). OK, so may be system administrator is allowed to break the policy but now login as testuser and run
alter login testuser with password='t' old_password='p'
This succeeds despite obviously breaking the policy.
Surely this can't be right, I must be doing something wrong.
Any help will be greatly appreciated.
Tim Gordon-Jones
Windows Server 2003 Password Policy And SQL Server 2005
Jun 12, 2007I have a complicated question that involves the password policy defined within Windows Server 2003 and how it is used in Microsoft SQL Server 2005. I recently installed windows server 2003 on my development system. I am a person that prefers to develop in the same OS that our application runs in production. After installing 2003, then a Domain administrator added my machine to our corporate domain. Now, I cannot change the local password policy to allow a simple password. I believe this is due to policy inheriting from the domain that the machine belongs to.
This ties back into SQL Server 2005 because installing sql server on a Server 2003 causes SQL Server 2005 to follow the password policies defined at the OS level. This breaks our application in a subtle way in that we create login accounts for new client databases with random password. Because the password is random it sometimes conforms to the policy and sometimes not.
In production environments, the password policies are configured differently. So I need to one of the following options:
-change the group policy/inherited policy on my machine to not inherity from the domain I joined (prefered solution but don't know HOW)
-change SQL Server to not use OS password policy
-change code to use CREATE LOGIN statement with CHECK_POLICY=OFF or change password generation code to use a stronger password. (don't want to do this as the code change is only accomodating non-production environments)
If someone has a better place to post this question, I would sure appreciate it.
SQL 2005 SP2 - Windows 2003 Ent SP1 - Password Does Not Meet The Password Policy DLL
Jun 18, 2007I am receiving the following error message when attempting to create a new SQL Authenticated login id.
Password validation failed. The password does not meet the requirements of the password filter DLL. (Microsoft SQL Server, Error: 15119)
I have four servers all running SQL Server 2005 SP2 on Windows 2003 Ent. SP1. Of the four servers, only one received the above error message using the same TSQL below.
CREATE LOGIN TEST_LOGIN WITH PASSWORD = 'pvif9dal' MUST_CHANGE, CHECK_EXPIRATION = ON
All four servers are in the same domain, which if I understand correctly, the password policies are therefore inherited at the OS level by the domain. The password being used is within the password policies of the domain.
Any ideas as to a root cause?
Need A Help In Backup Policy
Oct 25, 2007Can it possible of taking full dump db backup of Logshipping server [Secondary Server.]
Or any other way {DTS} on Secondary server, to update third server on daily basis.
please co-operate me on this issue
Thanx in advance
Regards
Dinesh
Dina Satam
Password Policy
Feb 18, 2008I'm trying to add the following user to my test enviroment using the following command:-
EXEC sp_addlogin OPICS, MASTER123456, OPXNEX
However, I'm getting the following error:-
Password validation failed. The password does not meet Windows policy requirements because it is not complex enough.
How can I disable Enforce password policy?
Windows Policy (disable)
May 23, 2007What is the best way to disable using the Windows policy requirements when creating a new login?
example: I'm trying to create a login and the password doesn't meet the windows policy requirements. The easy thing to do would be to create a strong password. This isn't an option at the moment. I need to disable this so I can create new users that dont have strong passwords.
Thanks!
Please Help To Design A Payroll Policy
Feb 12, 2008hi,
Please help me in designing one of our payroll policies. i have been trying but unable to find any solution.
i have data in 2 tables :
1. attendance (empid, date, hours, leaveallowed)
2. holidays (date,type) (4 types of holidays like national, weekly offs etc)
Policy: if any employee is not present on both days - the day before and after the holiday then leave allowed is false
attendace table contains the records for all employees who are present and i have to add rows for missing dates where leaveallowed will be false (hours will be zero).
eg. if any employee is absent on friday and monday then leaveallowed for saturday and sunday will be false.
i have tried many things but the best i have is following query that uses cross join with holidays table after adding rows for all dates in holidays (holidays table now looks as calendar)
Code:
SELECT DRVD.empid,DRVD.calendardate,DRVD.holidaytype,
attendance.workhours
FROM attendance RIGHT OUTER JOIN
(SELECT * FROM employees CROSS JOIN calendar
WHERE calendardate < getdate()) DRVD
ON attendance.empid=DRVD.empid
AND attendance.workdate=DRVD.calendardate
thanks
Select All Commission In A Row By Policy ID
Feb 12, 2014I have policy and commission table. There are up to 3 levels of commission for each policy and i want to select all commission in a row by policy id
for eg :
select policy.policyid,commission.amount,commission.level
from policy
inner join commission
on commission.policyid = policy.policyid
Result
Policyid Commission level
50470 9.056839 2
50470 31.011067 3
50470 7.185093 0
23355 6.8347 0
23355 76.989 2
But i want to display like below
policyid level0 level2 level3
50470 7.185093 9.05683931.011067
23355 6.834776.989
Loopback Server Policy
Sep 10, 2006
Hello all,
Recently, we ran into the issue that you can't do an insert into..exec statement on a loopback linked server that was previously commented on in:
http://www.dbnewsgroups.net/link.aspx?url=http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=124137&SiteID=1
So, for example, if you have a linkedserver to a database that happens to be on the same server as the querying thread, it fails with the message 'context in use'.
The answer from the previous thread was, don't use linked servers when the database is on the same server.
However,
The enviornment in our production system is fairly dynamic -- operations can be expected to move databases around in response to load balancing issues. We were counting on linked servers to make certain (non-performance sensitive) queries without regard to where a given database was located. Accepting that we have to make an exception case where the database lives on the same server means we'll have to have two sets of queries for every case this happens.
Something like
(pseudocode)
If server of linkedserver <> @@server
Insert into table....
Exec linkedserver.database.dbo.sproc
Else
Insert Into Table
exec database.dbo.sproc
(end pseudocode)
This seems pretty kludgy to me -- any suggestions on how to better manage this situation?
Thanks in advance
Support Policy For SQL Server 2000
Nov 2, 2006Anybody have any idea where I can get the dates that Microsoft will support SQL Server 2000?
Thanks in advance.
Blank Password Policy Problem
Oct 2, 2006Hi all,We recently started to receive complaints about our install project notworking and giving and shitload of error messages related to SQL. Welater found out that the problem was the users we were trying to bindto we're not created because of the domain password policy featureimplemented into SQL Server 2005.After much dabbling around the SQL scripts that created the databasestructure, we came to the conclusion that only this piece of code couldcorrect our problem :CREATE LOGIN mynewuser WITH PASSWORD = '', CHECK_POLICY = OFF,CHECK_EXPIRATION = OFFThis runs perfectly fine on SQL2005, but not on SQL2000. We have beensearching for a way to have code in SQL files executed on install thatdoesn't fail to compile when run against the server and that willbypass the password policy in case it's a SQL Server 2005...Right now we are testing a feature available in MSI that can filterscripts not matching a database version, but the problem with this, isthat we are missing a lot of features that InstallShield has. In short,we need Help to fix this issue and be able to continue withdevelopment.In hopes to receive a a prompt anwser
View 3 Replies View RelatedSql Server Password Policy Requirements
May 30, 2007Hi!
I am installing SQL Server 2005 Express as part of my setup. On Windows 2003 Servers with password policy enabled, the SQL Server 2005 Express installation fails. Here is the error I am getting - "the sa password must meet SQL Server password policy requirements. For strong password guidelines, see Authentication Mode, in SQL Server Books Online.". If I disable the password policy, the SQL Server 2005 Express installation is OK.
Is there a parameter that I can pass to the command line to get around this?
Thanks!
SQL Login Enforce Password Policy
Mar 20, 2007I have a 3 node cluster running windows 2003 x64 sp1 and SQL Server 2005 version 9.00.2153. My problem is the following...
This Saturday I migrated a web application's database to this server. After restoring the database I created the sql login for the service account, set the password and disabled the password policy for this login. I then ran sp_change_users_login to attach the already existing db user with the same name to the login. I changed the connection string for the application, tested the application connectivity and functionality then detatched the old database on the old server. Everything went like clockwork, no problems at all.
Come Monday morning at 8:35 I started getting alerts that the web site was down. I tested the site and sure enough it was down. I then attempted to connect to the database server using the login that was created for the app and the connection failed. I logged in with my ID and got in fine. Nothing showing to be wrong with the DB, I checked the new login and somehow the "Enable Password Policy" had been set for the new login. I disabled it and still no connection. I went to the database and checked the DB user and somehow the link between it and the login no longer existed. I reran the sp_change_users_login and restested the web site and verified that that web site was back online.
My question is this, is there any stored proc that resets these values back to default for some reason, a series of events that might revert the "Enable Password Policiy" to the default for a login, or is there a particular domain level operation that might occur such as Security Polcies that would affect these settings in SQL?
No one else was on the machine when I went to check it out at 8:40 so it has left me puzzled.
Any help would be appreciated.
Thanks.
Zach
Forcing Password Policy By Modifying Sp_addlogin
Nov 4, 2004Hi,
did anybody tri force password policy by modifing
sp_addlogin
and
sp_password
Raising custom error if password to be inserted or cnanged does not meet company policy.
Why microsoft did not add this condition in code?
Thank you
Alex
SQL Server Reporting Services Security Policy
Feb 20, 2008Hi,
How programing add new <CodeGroup> element to SQL Server Reporting Services policy configuration file "rssrvpolicy.config"(location path:"C:Program FilesMicrosoft SQL ServerMSSQLReporting ServicesReportServer")???
Ahead Thanks!
Enforce Password Policy And Expiration In .NET 3.5 Application
May 22, 2008Hello,
I am building a winforms .net 3.5 application which connects to a SQL Server 2005 database with SQL server authentication. Is it possible to access the SQL Server password policy and expiration through the .NET 3.5 framework? I would like add the following functionality to my login form:
Ensure passwords meet policy standard.
Prompt a user to change their password when it is due to expire in 5 days or less.
Thanks in advance.
Return Rows Only If More Than 1 Row Of The Same Policy Number Exists?
Sep 25, 2007I have a policy table which has policyNumbers and createDate. I need to retrieve all rows where createDate is between 2 dates and there is more than 1 row with the same policy number. I cannot figure out the SQL to return all policy number rows if there are more than 1 row with the policy. Most policies number will be in the table once. I need the others.
Thanks for suggestions.
How To Make Enforce Password Policy Unchecked By Default
Jul 12, 2007I am trying to create a login using my application.
The application creates the user and password itself .
when working with sql server 2000 it works fine.
when i try to install my application with sql server 2005 it is displaying the error .
'Password does not meet windows policy requirements
because it is not complex enough'
I want to keep the same password.
Is there any way to disable/uncheck this option by default?
Prashant
.NET Framework Execution Was Aborted By Escalation Policy Because Of Out Of Memory.
May 6, 2008AppDomain 446 (A.dbo[runtime].477) unloaded.
AppDomain 446 (A.dbo[runtime].477) is marked for unload due to memory pressure.
Error: 6532, Severity: 16, State: 48.
.NET Framework execution was aborted by escalation policy because of out of memory.
I€™m getting this problem on server €œA€? when I restore a backup that is located on a drive on server €œA€? to server €œB€?. The drive isn€™t actually on server €œA€? it is on an EMC but is mapped to server €œA€?. So, I guess server €œA€? is acting as a file server for the file.
Server €œA€? is an x64 bit server with 32 GB of Ram. It has SQL 2005 Enterprise Edition build 9.00.3042.00. Min Memory is set to 2 GB and Max is set to 28 GB. SQL service is running under a windows account with €œLock pages in Memory€? set.
From what I€™ve read this was a problem but I thought SP2 fixed it.
Any ideas?
Thanks.
.NET Framework Execution Was Aborted By Escalation Policy Because Of Out Of Memory
Jan 30, 2007Hi,
I have a SQL CLR used to read a XML file, it works fine when the file is smaller, but will give me this error if the file if bigger i.e. more than 10M.
Msg 6532, Level 16, State 49, Line 2
.NET Framework execution was aborted by escalation policy because of out of memory.
System.InvalidOperationException: Data access is not allowed in this context. Either the context is a function or method not marked with DataAccessKind.Read or SystemDataAccessKind.Read, is a callback to obtain data from FillRow method of a Table Valued Function, or is a UDT validation method.
System.InvalidOperationException:
at System.Data.SqlServer.Internal.ClrLevelContext.CheckSqlAccessReturnCode(SqlAccessApiReturnCode eRc)
at System.Data.SqlServer.Internal.ClrLevelContext.GetDatabase(SmiEventSink sink, Int32* pcbLen, IntPtr* ppwsName)
at Microsoft.SqlServer.Server.InProcConnection.GetCurrentDatabase(SmiEventSink eventSink)
at System.Data.SqlClient.SqlInternalConnectionSmi.Activate()
at System.Data.SqlClient.SqlConnectionFactory.GetContextConnection(SqlConnectionString options, Object providerInfo, DbConnection owningConnection)
at System.Data.SqlClient.SqlConnectionFactory.CreateConnection(DbConnectionOptions options, Object poolGroupProviderInfo, DbConnectionPool pool, DbConnection owningConnection)
at System.Data.ProviderBase.DbConnectionFactory.CreateNonPooledConnection(DbConnection owningConnection, DbConnectionPoolGroup poolGroup)
at System.Data.ProviderBase.DbConnectionFactory.GetConnection(DbConnection owningConnection)
at System.Data.ProviderBase.DbConnectionClosed.OpenConnection(DbConnection outerConnection, DbConnectionFactory connectionFactory)
at System.Data.SqlClient.SqlConnection.Open()
at BuildDirect.SQLCLR.CLRErrorHandler.RaiseNewCLRError(Int32 errorid, String errormsg)
at BuildDirect.SQLCLR.CLRErrorHandler.ReportCLRError(String location, String errormsg)
at BuildDirect.SQLCLR.CLRErrorHandler.ReportCLRError(String location, Exception ex)
at BuildDirect.SQLCLR.HTTPRequest.uCLRGetHTTPResponse(String url)
How to prevent this error and solve this problem?
Thanks
DB Engine :: Database Mail Could Not Be Sent - Rejected Due To Policy Reasons
Jul 29, 2015I have configured DB Mail in our SQL Server Management Studio. But I am getting the following Error. Also I am getting Same Error while doing SSRS Report Subscription via mail. (Same Server).
Error Message
The mail could not be sent to the recipients because of the mail server failure. (Sending Mail using Account 4 (2015-07-21T04:22:24). Exception Message: Cannot send mails to mail server. (Transaction failed. The server response was: Mail from
analytics@xyz.com rejected for policy reasons.).
)
For your additional info: In SSIS I can able to send email using Mail Task.
SQL Server Admin 2014 :: Group Policy User Denied Access
Sep 15, 2014I have a user, who is trying log into the server, but everytime he gets this error saying something about the Group policy denies him access.
This user needs access and i'm trying to understand how to grant it to him.
I have been looking into how i can access the group policy editor, but the farthest i can get is the Local group policy editor. How do i make sure this specific user has access?
SQL Server Admin 2014 :: Policy Management - Table References In Stored Procedures
Feb 3, 2015Is there any way to enforce table references in stored procedures? For Example, we have stored procedures with a ton of different formats, "dbo.table", "table", "db.dbo.table", etc. Can we make it so that for every stored procedure, the reference must be at least "dbo.table"?
View 1 Replies View RelatedDB Engine :: System Failure Error Check Policy - Filter By Time Generated?
Jan 17, 2013I have been searching for a means to change the System Failure Error Check policy that comes as part of the Best Practice policies. I want to look back 24 hours. The WQL query shipped with the policy doesn't have a WHERE clause component that looks at TimeGenerated. That query looks like:
IsNull(ExecuteWql('Numeric', 'rootCIMV2', 'select EventCode from Win32_NTLogEvent where EventCode=6008 and Logfile="System"'), 0)
After searching for an example of how to do this and not finding any that are specific to PBM, I decided to fall back to a very basic approach - use wbemtest.exe to try out where clause additions and see how they work, then plug the result into the policy and see if it works. As a start, I tried the following query using wbemtest.exe:
select Event Code
from Win32_NTLogEvent
where EventCode = 6008
and Logfile = 'System'
and TimeGenerated > '20130101010000.000000–000'
This works great in wbemtest.exe. My next step was to plug this into the policy condition expression as follows: IsNull(ExecuteWql ('Numeric', 'rootCIMV2', 'select EventCode from Win32_NTLogEvent where EventCode=6008 and Logfile="System" and TimeGenerated > "20130101010000.000000–000"'), 0)
When I try to manually evaluate this policy in SSMS, I receive an "Invalid Query" error message.I assume that SWbemDateTime isn't available to use inside Policy Based Management policies. All the examples of how to handle the kind of dynamic date creation I have seen are for use in PowerShell, VBScript, or SSIS. I've played with using DateDiff, DateAdd, and GetDate inside the query string, with no success.
Why does the ExecuteWql above fail?Is it at all possible to dynamically generate a datetime (say, 24 hours ago) as part of the query string parameter of the ExecuteWql call?What might that look like?
The Sa Password Must Meet SQL Server Password Policy Requirements.
Jun 30, 2007I tried to install an ALLDATA database which run with SQL Server 2005 express edition. The data base fails to install becase of the following code that come up which is related to AS password requirement. The error that come up is:
TITLE: Microsoft SQL Server 2005 Setup
------------------------------
The sa password must meet SQL Server password policy requirements. For strong password guidelines, see Authentication Mode, in SQL Server Books Online.
For help, click: http://go.microsoft.com/fwlink?LinkID=20476&ProdName=Microsoft+SQL+Server&ProdVer=9.00.2047.00&EvtSrc=setup.rll&EvtID=28001&EvtType=sqlca%5csqlcax.cpp%40SAPasswordPolicyCheck%40SAPasswordPolicyCheck%40x6d61
------------------------------
BUTTONS:
&Retry
Cancel
------------------------------
I am trying to install this database in a network server operating under Windows Server 2003 R2 with SP2. If anyone knows how to solve this problem, please let me.
Thanks,
Amilcar
How To Apply SQL Server 2005 Express SP1 To The Version Of SQL Server 2005 Express Which Installs With Visual Studio 2005?
Aug 8, 2006When I installed VS 2005, it installed the default version of SQL Server 2005 Express that ships with Visual Studio 2005 installer media.
How can apply SQL Server 2005 Express SP1 to update this existing instance?
Currently, if I run this query:
SELECT @@version
I get the following:
Microsoft SQL Server 2005 - 9.00.1399.06 (Intel X86) Oct 14 2005 00:33:37 Copyright (c) 1988-2005 Microsoft Corporation Express Edition on Windows NT 5.1 (Build 2600: Service Pack 2)
After applying SP1, I should get 9.00.2047.00.
Should I just go to this link and download & install the SQL Server 2005 Express Edition SP1:
http://msdn.microsoft.com/vstudio/express/sql/download/
Thank you,
Bashman
Sql 2005 Upgrade Sql Standard 2005 To 2005 Standard Sp2 (using A Command Prompt)
Apr 10, 2008First of all I am planning to install sql 2005 standard and sql standard sp2
on vista ultimate professional using vs 2008 pro
I have some questions about installing sql 2005 what is the best way to install sql 2005 on
vista My article I got this from ms 403393 (upgrading sql standard 2005 to sql standard 2005sp2)
1 sql standard .(shortcut right click from cd/dvd not possible) I have heard command prompt start menu, click cmd
type run D: cd/dvd exe
From a wizard (sql sp2)
2. sql standard sp2
a. upgrade using a wizard
b. open a command prompt (not sure if right click is best option)
install dvd media example dqlserver2005sp2-kb921896-exe SKUUPGRADE=1(is run as administrator option on media)
do I type run or what do I type ?
c. go to system configuration page(where is this) you should see a single warnining you need to install
sp2, the edition should say success if it does not please reapply
d. on the registration page please enter your registeration number
e. on the comments to install please enter database services, reporting services
workstation components, books online and development tools( I wish to install
all components)
f. on the instance page click default instance(default install)
g. finish rest of wizard
h. apply sql sp2
I also have of seperate question of upgrading sql from vista using a Configuring local admin account
account (configuring administration from a wizard-will this notify
me by default) I do not want my administrative priviledges elevated.
I will be using default configurations for my installations.........
I often wish there would a nice picture examples of doing this
Please help