15128 Sql Server Error
Contents |
one of those nasty little thorns that sticks you every once in a while. You add a new SQL Server authentication login with Server Manager and you forget to uncheck the boxes for User must change password, Enforce password, sql server must change and Enforce Expiration. Being this is an application user for which you don't want to enforce sql server error 15023 password restrictions and which uses ODBC, therefore never seeing a login dialog, they never get an opportunity to change the password. Consequently the
Sql Server Error 18488
login can't be used as is. Ok, you realize your mistake too late. The login has been created. It has been associated with one or more databases and/or schemas. Permissions have been granted, etc., etc., etc. How do you
Sql Server Error 18456
fix it? Guess what? If you try to just want to uncheck the "User must change" check box, you can't! It is greyed out. This conundrum perplexed me to no end when first encountered. Searching the internet turned up several solutions like this one:ALTER LOGIN test_must_change WITH PASSWORD = ‘newpass', CHECK_POLICY = OFF, CHECK_EXPIRATION = OFF; Guess what happens (you have three choices and the first two don't count). You get this error message Msg 15128, Level 16, sqlserver 15128 State 1, Line 1The CHECK_POLICY and CHECK_EXPIRATION options cannot be turned OFF when MUST_CHANGE is ON. If you try to user Server Manager and just uncheck the ‘Enforce password policy' or ‘Enforce password expiration' boxes, you get this THE FIX You MUST change the password first and it must be done without changing the other password policy options. You CAN change the password to be the same as the existing one. However, you do it, you still must effect a change on the password an then change the policy options as a separate step. If you choose to use the Server Manager wizard, when you change the password, the ‘User must change password' check box will become available and you can then uncheck it (do not uncheck the other policy check boxes if they already were). You can then save the change, open the wizard again, uncheck the other policy restrictions, and save it again. If you decide to use a query, you can use code similar to thisUSE MasterGOALTER LOGIN test_must_change WITH PASSWORD = ‘samepassword'GOALTER LOGIN test_must_change WITH CHECK_POLICY = OFF, CHECK_EXPIRATION = OFF; This entry was posted in Uncategorized on January 29, 2009 by John Wood. Post navigation ← Use RMAN to Fix a "604" Error on Database Start Configure D-Link DIR 625 for Cisco VPN → 6 thoughts on “Fix a SQL Server Login which has MUST_CHANGE set to ON&rdq
(Русский)ישראל (עברית)المملكة العربية السعودية (العربية)ไทย (ไทย)대한민국 (한국어)中华人民共和国 (中文)台灣 (中文)日本 (日本語) HomeLibraryLearnDownloadsTroubleshootingCommunityForums Ask a question Quick access Forums home Browse forums users FAQ Search
Sql Server Must Change Turn Off
related threads Remove From My Forums Answered by: How check_expiration in sql server to set SQL Server Login MUST_CHANGE, CHECK_POLICY, CHECK_EXPIRATION all to OFF with T-SQL sql server user must change password at next login SQL Server > Transact-SQL Question 0 Sign in to vote How to set SQL Server Login MUST_CHANGE, CHECK_POLICY, CHECK_EXPIRATION all to OFF http://www.webofwood.com/2009/01/29/fix-a-sql-server-login-which-has-must_change-set-to-on/ with T-SQL. SSMS will not allow me to change policies to OFF. Error: 15128 - The CHECK_POLICY and CHECK_EXPIRATION options cannot be turned OFF when MUST_CHANGE is on. I am attempting to change these options in a test environment. Thanks, Richard Thursday, March https://social.msdn.microsoft.com/Forums/sqlserver/en-US/aba701b1-941b-42d5-aec1-2e801fbc1a15/how-to-set-sql-server-login-mustchange-checkpolicy-checkexpiration-all-to-off-with-tsql?forum=transactsql 26, 2015 8:34 PM Reply | Quote Answers 0 Sign in to vote It appears you have to change the password first(it could the same password but an alter command needs to be done) check this :http://www.sqldbadiaries.com/2010/11/07/the-check_policy-and-check_expiration-options-cannot-be-turned-off-when-must_change-is-on/ http://sqldbpool.com/2012/10/08/the-check_policy-and-check_expiration-options-cannot-be-turned-off-when-must_change-is-on-microsoft-sql-server-error-15128/Hope it Helps!! Proposed as answer by Eric__ZhangMicrosoft contingent staff, Moderator Monday, March 30, 2015 8:40 AM Marked as answer by Eric__ZhangMicrosoft contingent staff, Moderator Tuesday, April 07, 2015 8:42 AM Thursday, March 26, 2015 8:53 PM Reply | Quote Microsoft is conducting an online survey to understand your opinion of the Msdn Web site. If you choose to participate, the online survey will be presented to you when you leave the Msdn Web site.Would you like to participate? Privacy statement © 2016 Microsoft. All rights reserved.Terms of Use|Trademarks|Privacy Statement|Site Feedback
This will result in an error message: Login failed for user http://jamesnearn.blogspot.com/2011/10/clear-must-change-password-checkbox-for.html 'login_name'. Reason: The password of the account must be changed. If you try to clear the message, you get: The CHECK_POLICY and CHECK_EXPIRATION options cannot be turned OFF when MUST_CHANGE is ON. (Microsoft SQL Server, Error: 15128) One solution is to delete the user and create again, and clear the checkbox. Another sql server solution I found on Experts Exchange: ALTER LOGIN UserLogin WITH PASSWORD = 'NewPassword' UNLOCK Then you can uncheck 'Enforce password policy' and 'Enforce password expiration' or just run the following two sql commands: ALTER LOGIN UserLogin WITH CHECK_EXPIRATION = OFF ALTER LOGIN UserLogin WITH CHECK_POLICY = OFF http://www.experts-exchange.com/Microsoft/Development/MS-SQL-Server/Q_23063893.html Posted by James Nearn sql server error at 12:27 PM Email ThisBlogThis!Share to TwitterShare to FacebookShare to Pinterest 2 comments: lee wooOctober 23, 2015 at 10:37 PMPanic causes tunnel vision. Calm acceptance of danger allows us to more easily assess the situation and see the options. See the link below for more info. #optionswww.ufgop.orgReplyDeleteUnknownJune 23, 2016 at 2:59 PMThanks James. Very helpful!ReplyDeleteAdd commentLoad more... Newer Post Older Post Home Subscribe to: Post Comments (Atom) Followers Blog Archive ► 2013 (3) ► October (1) ► January (2) ► 2012 (10) ► November (1) ► October (2) ► August (1) ► May (2) ► February (4) ▼ 2011 (12) ► December (2) ▼ October (1) Clear the "must change password" checkbox for new ... ► September (2) ► August (1) ► July (2) ► June (2) ► May (2) About Me James Nearn This is my bio. It is something that is about me. View my complete profile Awesome Inc. template. Powered by Blogger.