Pau Lo
asked on
sql queries for logins and password policy
We need to audit a number of sql server installations, ranging from 2000 - 2008.
I need a query (if different for each release of SQL one per release) to list:
1) details of the password policy per sql login (i.e.password expirty, complexity, lockout values etc)
2) details of all sql server authentication logins and their server level permissions (i.e. sysadmin, securityadmin)
3) guest account status per database (i.e. enabled, not enabled).
I need a query (if different for each release of SQL one per release) to list:
1) details of the password policy per sql login (i.e.password expirty, complexity, lockout values etc)
2) details of all sql server authentication logins and their server level permissions (i.e. sysadmin, securityadmin)
3) guest account status per database (i.e. enabled, not enabled).
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
http://msdn.microsoft.com/en-us/library/fooa616fce9-b4c1-49da-87a7-9d6f74911d8f.aspx
Try syslogins for information on your logins - here's the BOL page for that: http://msdn.microsoft.com/en-us/library/ms178593.aspx
It has columns indicating if each user is a member of one of the fixed server roles and the column hasaccess should be enough to tell disabled / enabled.
The other columns isntname, isntgroup and isntuser should be able to separate SQL Server user, Windows User and Windows Group apart from each other.