The CHECK_POLICY and CHECK_EXPIRATION options cannot be turned OFF when MUST_CHANGE is ON.

Error Message:
Msg 15128, Level 16, State 1, Line 2
The CHECK_POLICY and CHECK_EXPIRATION options cannot be turned OFF when MUST_CHANGE is ON.

Severity level:
16.

Description:
This error message appears when you try to deactivate the CHECK_EXPIRATION and the CHECK_POLICY option in a CREATE LOGIN statement, while the MUST_CHANGE option is activated.

Consequences:
The T-SQL statement can be parsed, but causes the error at runtime.

Resolution:
Errors of the Severity Level 16 are generated by the user and are corrigible by the user. The statement cannot be executed this way. When you use the MUST_CHANGE option, should CHECK_POLICY be activated for CHECK_EXPIRATION to make sense at.

Versions:
This error message was introduced with SQL Server 2005.

Example(s):
USE Master;
CREATE LOGIN MyLogin
 WITH PASSWORD = ‘ABC’
 MUST_CHANGE,
 CHECK_POLICY = OFF,
 CHECK_EXPIRATION = OFF;
GO

Remarks:
In the above example we try to activate the MUST_CHANGE option, even though both CHECK_POLICY as well as CHECK_EXPIRATION are deactivated. This raises the error.