The CHECK_POLICY and CHECK_EXPIRATION options cannot be turned OFF when MUST_CHANGE is ON.

Error Message:
Msg 15128, Level 16, State 1, Line 2
The CHECK_POLICY and CHECK_EXPIRATION options cannot be turned OFF when MUST_CHANGE is ON.

Severity level:
16.

Description:
This error message appears when you try to deactivate the CHECK_EXPIRATION and the CHECK_POLICY option in a CREATE LOGIN statement, while the MUST_CHANGE option is activated.

Consequences:
The T-SQL statement can be parsed, but causes the error at runtime.

Resolution:
Errors of the Severity Level 16 are generated by the user and can be fixed by the SQL Server user. The statement cannot be executed this way. When you use the MUST_CHANGE option, should CHECK_POLICY be activated for CHECK_EXPIRATION to make sense at.

Versions:
This error message was introduced with SQL Server 2005.

Example(s):
USE Master;
CREATE LOGIN MyLogin
 WITH PASSWORD = ‘ABC’
 MUST_CHANGE,
 CHECK_POLICY = OFF,
 CHECK_EXPIRATION = OFF;
GO

Remarks:
In the above example we try to activate the MUST_CHANGE option, even though both CHECK_POLICY as well as CHECK_EXPIRATION are deactivated. This raises the error.

]]>

Leave a comment

Your email address will not be published.