1

For the setup of an application i wanted to do a silent install of sql server. For backward compatibility the server needs a weak sa password. I know that sa should not be used and i know that it should not have a weak password, but I'm not responsible for this and I can't change this part.

When trying to do a silent install with SAPWD="ThePassword" i get an error, that the password does not match the password policies. Is there any way to force the weak password in silent installation?

Thanks for help.

Improve this question

3 Answers 3

Reset to default
1

As score already pointed out, you need to change the security policies to do this. If there would be a way to install something that breaks a company policy without disabling the said policy, that would be technically a 'vulnerability' and the operation would be called an 'exploit'.

Now you have two options:

  • change the company policy to allow the application.
  • obey the company policies and don't allow the application.

Is really simple as this...

Improve this answer
1
1
  1. Setup SQL unattendly whith some realy strong pass (yes it depends on M$)
  2. sqlcmd -S. -E -Q "ALTER LOGIN [sa] WITH PASSWORD=N'some_weak_pass', CHECK_EXPIRATION=OFF, CHECK_POLICY=OFF"

that's all. login or use it whith weak pass. tested on 2008 r2

P.S. also you can install unattendly using integrated security mode and later use sqlcmd to switch sql server into combine mode to use SA with weak pass

Improve this answer
0

You could try this:

  • Run secpol.msc on the server before installation.

  • Go to account policies -> password policy

Go to account policies - password policy

  • Disable "Password must meet complexity requirements" and give it another go
Improve this answer
4

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .