- Enforce password history
- Minimum password age
- Minimum password length
- Password must meet complexity requirements
There is nothing written specifically indicating which policies are checked by CHECK_POLICY. The answer was determined by experimentation (SQL Server 2005 SP2 on Vista). A SQL Server login was created, then a query window was opened with the connection made using that login. ALTER LOGIN WITH PASSWORD = ''OLD_PASSWORD'' was run when various policies were applied.