disallow simple password checks to see if the password contains the login name as a substring. You can set it to:
0 – (default) turns off the option, and allows simple passwords.
1 – turns the option on, and disallows simple passwords.
To set this option, enter:
sp_passwordpolicy 'set', 'disallow simple passwords', 1
When you disallow simple passwords, you cannot use your login name as a substring in your password. You must set it to something complex. For example:
sp_password 'old_complex_password', BHotAcha789, johnd
The login johnd now
has a password of BHotAcha789,
which does not contain the login name as a substring.
However, if you change the login password entering the following,
the login johnd is now
a substring of the new password johnd123,
and the command fails:
sp_password 'old_complex_password', johnd123, johnd
