SQL Server Login - failed login attempts

Question

Hello All - Is there a way to set consecutive failed login attempts to a specific number like 3 or 4 times (for SQL Server Logins)? If this count is crossed the expectation is to lock the account...

Apprecaite your help. Thanks

Answer 1

You can enforce the pasword policy of the Windows server on which SQL Server is installed using the CHECK_POLICY option of CREATE USER, see http://msdn.microsoft.com/en-us/library/ms189751.aspx and http://msdn.microsoft.com/en-us/library/ms161959.aspx. It's not clear from the documentation but it does look like the user will be automatically locked out if the number of bad attempts exceeds the Windows security policy's setting.

You'll need to administer the security policy in the domain or local security policy MMC snapin (see http://technet.microsoft.com/en-us/library/dd277400.aspx).