SQL Server and Windows Authentication Mode uses either Active Directory user accounts or SQL Server accounts when validating access to SQL Server
. SQL Server 2005 introduces a new way, the policy of the password and account lockout the policy session of SQL Server by using SQL Server implement authentication. SQL Server 2008 also to do so. The policy of SQL Server that can be used include password complexity, password expiration and account lockout. This feature is not available in SQL Server 2000 and becomes a major security risk for most organizations and database administrators. In essence, this weakness has contributed to the Windows authentication set as best practice for the management of authentication in the past. Today, SQL Server and Windows authentication mode may be able to successfully compete with the Windows Authentication Mode.