->For SQL Server logins if you run an [ALTER LOGIN](../../t-sql/statements/alter-login-transact-sql.md) command to change a user's password that also has CHECK_POLICY enabled, if OLD_PASSWORD is omitted then [Enforce Password History](../../windows/security/threat-protection/security-policy-settings/enforce-password-history.md) is ignored. This is a by-design behavior to allow password resets despite any previously used passwords. Other checks associated with CHECK_POLICY including length and complexity are checked regardless whether OLD_PASSWORD is used.
0 commit comments