Till to date large number of attacks are still carried out by guessing
users password. A structured organization have well defined and
imposed Password Policy but policy control enforcement measures do not
guarantee secure MSSQL databases.

Tools for password auditing are easily available on internet.
Administrators, security personnel and IT auditors should make use of
such tools and double check password based security. One of the best I
have seen is MSSQL Password Auditor embedded in Secure Auditor which
enable administrators, security personnel and IT Auditors to
proactively enforce Password Policy on users who are complying with
the policy but are bending it for their ease without realizing that
this negligence can take down the entire organization’s security.
Go to the link to download your copy.
http://www.download.com/Secure-Audit...=uo&tag=button
It also audits Oracle, Windows and Cisco routers. Download your copy
and tell me about your comments