In SQL Server, I understand when the "Enforce password policy" is checked for accounts with SQL authentication, it will pull from the O/S.

If "enforce password policy" is checked and "enforce password expiration" is not checked, will the SQL account's password inherit the expiration of 90 days? Or do both have to be checked?

Does "enforce password policy" override the "enforce password expiration" whether it's checked or not?

1 Answer 1


The password policy applies to restrictions around Windows password policy, including things like:

  • An uppercase character (A-Z).
  • A lowercase character (a-z).
  • A digit(0-9).
  • One of the non-alphanumeric characters, such as a space, _, @,
    *, ^, %, !, $, #, or &.

It does not handle expiration checks, you need to have the check expiration set for that to happen.

Reference MSDN Create Login

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.