Question

Using t-sql, how can i find if all SQL Logins have strong passwords on SQL 2000 and 2005 servers?

Any help, much appreciated.

Regards
Manjot

Answer 1

You can’t! It’s would be a security issue if you could identify weak passwords. You might want to force all users to change their passwords and enforce a password policy.

The cracker:

// pseudocode:
foreach (var username in 
   exec(@"SELECT username FROM hypothetical.fn_get_users_with_weak_passwords()"))
    PerformDictionaryAttack(username);

Not so good… ain’t it?