aboutsummaryrefslogtreecommitdiff
path: root/databases/sql/passwords/query.sql
diff options
context:
space:
mode:
authorChristian Cleberg <hello@cleberg.net>2025-05-06 21:54:18 -0500
committerGitHub <noreply@github.com>2025-05-06 21:54:18 -0500
commitf351e70fbdf72ec14f335aa74ad3e7f0bc6da5bc (patch)
tree4a43c4a8f23d001b3277e7668400b8f270946291 /databases/sql/passwords/query.sql
parent95bf612c338dec8235e89ca6a1d9e5e8cad3f997 (diff)
downloadaudit-tools-f351e70fbdf72ec14f335aa74ad3e7f0bc6da5bc.tar.gz
audit-tools-f351e70fbdf72ec14f335aa74ad3e7f0bc6da5bc.tar.bz2
audit-tools-f351e70fbdf72ec14f335aa74ad3e7f0bc6da5bc.zip
add and update READMEs (#7)
* add and update READMEs * Commit from GitHub Actions (Ruff) --------- Co-authored-by: github-actions <41898282+github-actions[bot]@users.noreply.github.com>
Diffstat (limited to 'databases/sql/passwords/query.sql')
-rw-r--r--databases/sql/passwords/query.sql30
1 files changed, 30 insertions, 0 deletions
diff --git a/databases/sql/passwords/query.sql b/databases/sql/passwords/query.sql
new file mode 100644
index 0000000..b5bef36
--- /dev/null
+++ b/databases/sql/passwords/query.sql
@@ -0,0 +1,30 @@
+/*
+References:
+1. https://learn.microsoft.com/en-us/sql/relational-databases/security/password-policy
+2. https://learn.microsoft.com/en-us/sql/t-sql/functions/loginproperty-transact-sql
+*/
+
+SELECT
+ name,
+ principal_id,
+ sid,
+ type,
+ type_desc,
+ is_disabled,
+ create_date,
+ modify_date,
+ default_database_name,
+ default_language_name,
+ credential_id,
+ is_policy_checked,
+ is_expiration_checked,
+ password_hash,
+ LOGINPROPERTY(name, 'IsMustChange') AS IsMustChange,
+ LOGINPROPERTY(name, 'IsLocked') AS IsLocked,
+ LOGINPROPERTY(name, 'LockoutTime') AS LockoutTime,
+ LOGINPROPERTY(name, 'PasswordLastSetTime') AS PasswordLastSetTime,
+ LOGINPROPERTY(name, 'IsExpired') AS IsExpired,
+ LOGINPROPERTY(name, 'BadPasswordCount') AS BadPasswordCount,
+ LOGINPROPERTY(name, 'BadPasswordTime') AS BadPasswordTime,
+ LOGINPROPERTY(name, 'HistoryLength') AS HistoryLength
+FROM sys.sql_logins;