Must_change Is On Error 15128
Contents |
one of those nasty little thorns that sticks you every once in a while. You add a new SQL Server authentication login with Server Manager and you forget to uncheck the the check_policy and check_expiration options cannot be turned off when must_change is on boxes for User must change password, Enforce password, and Enforce Expiration. Being this is sql server user must change password at next login an application user for which you don't want to enforce password restrictions and which uses ODBC, therefore never seeing a login
Check_expiration In Sql Server
dialog, they never get an opportunity to change the password. Consequently the login can't be used as is. Ok, you realize your mistake too late. The login has been created. It has been associated with
Set The 'check_policy' Option To On For All Sql Authenticated Logins
one or more databases and/or schemas. Permissions have been granted, etc., etc., etc. How do you fix it? Guess what? If you try to just want to uncheck the "User must change" check box, you can't! It is greyed out. This conundrum perplexed me to no end when first encountered. Searching the internet turned up several solutions like this one:ALTER LOGIN test_must_change WITH PASSWORD = ‘newpass', CHECK_POLICY = OFF, CHECK_EXPIRATION check_policy sql server = OFF; Guess what happens (you have three choices and the first two don't count). You get this error message Msg 15128, Level 16, State 1, Line 1The CHECK_POLICY and CHECK_EXPIRATION options cannot be turned OFF when MUST_CHANGE is ON. If you try to user Server Manager and just uncheck the ‘Enforce password policy' or ‘Enforce password expiration' boxes, you get this THE FIX You MUST change the password first and it must be done without changing the other password policy options. You CAN change the password to be the same as the existing one. However, you do it, you still must effect a change on the password an then change the policy options as a separate step. If you choose to use the Server Manager wizard, when you change the password, the ‘User must change password' check box will become available and you can then uncheck it (do not uncheck the other policy check boxes if they already were). You can then save the change, open the wizard again, uncheck the other policy restrictions, and save it again. If you decide to use a query, you can use code similar to thisUSE MasterGOALTER LOGIN test_must_change WITH PASSWORD = ‘samepassword'GOALTER LOGIN test_must_change WITH CHECK_POLICY = OFF, CHECK_EXPIRATION = OF
(Русский)ישראל (עברית)المملكة العربية السعودية (العربية)ไทย (ไทย)대한민국 (한국어)中华人民共和国 (中文)台灣 (中文)日本 (日本語) HomeLibraryLearnDownloadsTroubleshootingCommunityForums Ask a question Quick access Forums home Browse forums users FAQ Search
Alter Login Must Change Example
related threads Remove From My Forums Answered by: How sql server alter login to set SQL Server Login MUST_CHANGE, CHECK_POLICY, CHECK_EXPIRATION all to OFF with T-SQL enforce password policy SQL Server > Transact-SQL Question 0 Sign in to vote How to set SQL Server Login MUST_CHANGE, CHECK_POLICY, CHECK_EXPIRATION all to OFF http://www.webofwood.com/2009/01/29/fix-a-sql-server-login-which-has-must_change-set-to-on/ with T-SQL. SSMS will not allow me to change policies to OFF. Error: 15128 - The CHECK_POLICY and CHECK_EXPIRATION options cannot be turned OFF when MUST_CHANGE is on. I am attempting to change these options in a test environment. Thanks, Richard Thursday, March https://social.msdn.microsoft.com/Forums/sqlserver/en-US/aba701b1-941b-42d5-aec1-2e801fbc1a15/how-to-set-sql-server-login-mustchange-checkpolicy-checkexpiration-all-to-off-with-tsql?forum=transactsql 26, 2015 8:34 PM Reply | Quote Answers 0 Sign in to vote It appears you have to change the password first(it could the same password but an alter command needs to be done) check this :http://www.sqldbadiaries.com/2010/11/07/the-check_policy-and-check_expiration-options-cannot-be-turned-off-when-must_change-is-on/ http://sqldbpool.com/2012/10/08/the-check_policy-and-check_expiration-options-cannot-be-turned-off-when-must_change-is-on-microsoft-sql-server-error-15128/Hope it Helps!! Proposed as answer by Eric__ZhangMicrosoft contingent staff, Moderator Monday, March 30, 2015 8:40 AM Marked as answer by Eric__ZhangMicrosoft contingent staff, Moderator Tuesday, April 07, 2015 8:42 AM Thursday, March 26, 2015 8:53 PM Reply | Quote Microsoft is conducting an online survey to understand your opinion of the Msdn Web site. If you choose to participate, the online survey will be presented to you when you leave the Msdn Web site.Would you like to participate? Privacy statement © 2016 Microsoft. All rights reserved.Terms of Use|Trademarks|Privacy Statement|Site Feedback
04/04/201521/10/2015 by Steven Nguyễn Yesterday I received a report of issue from one of my customer stated that he couldn’t access to the SQL Server, I checked and found that the account was set with “Enforce password expiration”, and https://stevenxvii.wordpress.com/2015/04/04/fix-the-check_policy-and-check_expiration-options-cannot-be-turned-off-when-must_change-is-on-microsoft-sql-server-error-15128/ “User must change password at next login”. When I tried to change the password and uncheck all the checkboxes (shown below) then got the dialog. Yes. “The CHECK_POLICY and CHECK_EXPIRATION options cannot be turned OFF when MUST_CHANGE is ON. (Microsoft SQL Server, Error: 15128)”. Oops, my bad, using the GUI I changed the password first (without changing in password policy options), and unchecked the checkboxes later, each step would be done sql server separately and great, everything works like a charm. But I still want to make it by using command line by doing the following using the “New Query” To change password USE master GO ALTER LOGIN [login name] WITH PASSWORD = ‘same password’ GO And then turn off the password policy ALTER LOGIN [login name] WITH CHECK_POLICY = OFF, CHECK_EXPIRATION = OFF; GO That’s it, everything done. Share this:TwitterFacebookLike this:Like Loading... Related must_change is on Posted in SQL ServerTagged CHECK_EXPIRATION, CHECK_POLICY, SQL ServerLeave a comment Post navigation Previous PostGet your Windows 7 ISO copy with Microsoft SoftwareRecoveryNext PostDifferent types of Cisco's featureset Leave a Reply Cancel reply Enter your comment here... Fill in your details below or click an icon to log in: Email (required) (Address never made public) Name (required) Website You are commenting using your WordPress.com account. (LogOut/Change) You are commenting using your Twitter account. (LogOut/Change) You are commenting using your Facebook account. (LogOut/Change) You are commenting using your Google+ account. (LogOut/Change) Cancel Connecting to %s Notify me of new comments via email. Search for: Recent Posts NAS demo cho Qnap vàSynology Tường lửa bảo mật ứng dụngweb Khôi phục mật khẩu SA trong SQL Server mà không cần phải ngừng hệthống Lưu Adobe Connect Recording để xemsau Xem demo sản phẩmDraytek Archives May 2016 January 2016 December 2015 April 2015 March 2015 September 2014 May 2014 February 2012 Categories Bảo mật Cisco Unified Collaboration Demo How to; Làm thế nào Security SQL Server Uncategorized Web Design Meta Register Log in Entries RSS Comments RSS WordPress.com Search for: Recent Posts NAS demo cho Qnap vàSynology Tường lửa bảo mật ứng dụngweb Khôi phục mật khẩu SA trong SQL Server mà không cần phải ngừng