Make sure all SQL Logins have the “enforced password” setting check
/* DESCRIPTION: The following code Enables the CHECK POLICY ON on all logins who needs it, No need to run the output, it just does it. CONFIGURATION None Author: Miguel Quintana Compatibility list: MSSQL2005 MSSQL2008 DOES NOT WORK MSSQL2000 */ DECLARE @LoginName sysname DECLARE @SQL NVARCHAR(1000) DECLARE DBLOGINS CURSOR FOR SELECT name FROM master.sys.sql_logins WHERE is_policy_checked = 0 OPEN DBLOGINS FETCH NEXT FROM DBLOGINS INTO @LoginName WHILE @@FETCH_STATUS = 0 BEGIN SET @SQL = 'ALTER LOGIN [' + @LoginName + '] WITH CHECK_EXPIRATION=OFF, CHECK_POLICY=ON;' -- print @SQL EXEC sp_executesql @SQL PRINT 'Fixing Login for ['+@LoginName+']' FETCH NEXT FROM DBLOGINS INTO @LoginName END CLOSE DBLOGINS DEALLOCATE DBLOGINS PRINT 'Done'