Up to this point they did not have one. At all... The problem is, I don't know anything about SQL, but I now understand that it's password policy is not enforced by domain Group Policy.