Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.


For the setup of an application i wanted to do a silent install of sql server. For backward compatibility the server needs a weak sa password. I know that sa should not be used and i know that it should not have a weak password, but I'm not responsible for this and I can't change this part.

When trying to do a silent install with SAPWD="ThePassword" i get an error, that the password does not match the password policies. Is there any way to force the weak password in silent installation?

Thanks for help.

share|improve this question

2 Answers 2

As score already pointed out, you need to change the security policies to do this. If there would be a way to install something that breaks a company policy without disabling the said policy, that would be technically a 'vulnerability' and the operation would be called an 'exploit'.

Now you have two options:

  • change the company policy to allow the application.
  • obey the company policies and don't allow the application.

Is really simple as this...

share|improve this answer
    
That's sounds logical, but then why can you disable password policy enforcement per-user after installation? (see "enforce password policy" here: msdn.microsoft.com/en-us/library/ms189425.aspx) –  mjmarsh Feb 28 '11 at 0:36

You could try this:

  • Run secpol.msc on the server before installation.

  • Go to account policies -> password policy

Go to account policies - password policy

  • Disable "Password must meet complexity requirements" and give it another go
share|improve this answer
    
I wanted a silent install(It's included in an installer). Therefore a user interaction is not possible. But thanks for the tip. –  Marks Aug 16 '10 at 9:54
    
I thought it would be ok to set this option before running the installer. Maybe you can set this option by using secedit (microsoft.com/resources/documentation/windows/xp/all/proddocs/…) –  Scoregraphic Aug 16 '10 at 12:05
    
Correct me if I'm mistaken, but I don't believe the SA account, or any other SQL (non-Windows) accounts respect this policy. –  MDMarra Aug 16 '10 at 15:36
    
The password policy is global and respected by SQL Server. See also mssqltips.com/tip.asp?tip=1088 and blogs.msdn.com/b/sqlsecurity/archive/2009/03/25/… –  Scoregraphic Aug 17 '10 at 5:59

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.