question

Dushyant2426 avatar image
Dushyant2426 asked

Encryption Key

Hi All, Thanks in advance... I have question regarding encryption key that i have already in my production server.. Right now if I want to reset password for user with sql authentication and I’m using 5 character encrypted password and it's giving me error for windows policy.. my question is that can i make new encrypted password with 8 character? I have right now Symmetric keys on my master DB. Name: ##MS_ServiceMasterKey##, Principal _id:1, Symmetric_key_id:102,Key_lenght:128,Key_algorithm:D3,algorithm_desc:TRPLE_DEC then it's create date and modify date..
security
1 comment
10 |1200

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

1 Answer

·
Blackhawk-17 avatar image
Blackhawk-17 answered
Your SMK has nothing to do with the user's password requirements. You are not adhering to the password policies of the O/S. If you want a shorter password you have to de-select the **Enforce password policy** checkbox in the user's properties. Of course this means a less secure password being used.
7 comments
10 |1200

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Dushyant2426 avatar image Dushyant2426 commented ·
If i select Enforce password policy it's getting pass my result but end user is not able to change password to his own password.. As our company rule we need to do checked Enforce password policy so end user can change password when they are using 1st login attempt.
0 Likes 0 ·
Blackhawk-17 avatar image Blackhawk-17 commented ·
Then the user needs to follow the policy and use a longer password.
0 Likes 0 ·
Dushyant2426 avatar image Dushyant2426 commented ·
Thanks for replying.. My situation is some typical and complicated.. For example i will create your user id in SQL server as Blackhawk with sql authentication using encrypted password which is I have to use "K6WTP". After is created you will use your id Blackhawk and password will be 12345 then you need to change to your own password at 1st attempt.
0 Likes 0 ·
Blackhawk-17 avatar image Blackhawk-17 commented ·
You need to make the password compatible with the password policy. And there is a chance that the policy also includes an age requirement of 1 day.
0 Likes 0 ·
Dushyant2426 avatar image Dushyant2426 commented ·
Thanks.. Do you know that how to do that? what is step ?
0 Likes 0 ·
Blackhawk-17 avatar image Blackhawk-17 commented ·
It will depend on your domain policies but they generally are a minimum of 8 characters and at least one character from three of the following: lowercase, uppercase, numeric and special characters.
0 Likes 0 ·
KenJ avatar image KenJ commented ·
You change password policy in Active Diretory - http://technet.microsoft.com/en-us/library/cc875814.aspx
0 Likes 0 ·

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.