Policy for Password Complexity

Policy for Password Complexity

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Policy for Password Complexity =?Utf-8?B?Sm9obk0=?= 07-21-2006
Posted by =?Utf-8?B?Sm9obk0=?= on July 21, 2006, 1:25 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
In the Group Policy Management Console you can set up a gpo to make the user
passwords complex. But it seems that the only option is not complex, 1
character set required, or complex, 3 character sets required.
How can I choose either 2 or 4 character sets required?
Someone told me that Microsoft has a download for the GPMC that will allow
this, but I cannot find it.
Is that correct? If so, what is it called and where can I find it?

Thanks,
John

Posted by Joe Richards [MVP] on July 21, 2006, 1:40 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Microsoft only has one complexity filter. Either it is on or it is off.
You can write or buy third party complexity filters and install them if
you like. Writing them is non-trivial and needs to be done by an
experienced Windows Win32 c++ programmer because if they are done
incorrectly you could have possible security and stability issues.

The actual complexity requirements can be viewed here

http://www.microsoft.com/technet/security/topics/serversecurity/tcg/tcgch02n.mspx



joe

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


JohnM wrote:
> In the Group Policy Management Console you can set up a gpo to make the user
> passwords complex. But it seems that the only option is not complex, 1
> character set required, or complex, 3 character sets required.
> How can I choose either 2 or 4 character sets required?
> Someone told me that Microsoft has a download for the GPMC that will allow
> this, but I cannot find it.
> Is that correct? If so, what is it called and where can I find it?
>
> Thanks,
> John

Posted by =?Utf-8?B?Q2lwaGVyVGVLU1Q=?= on September 24, 2006, 3:46 am
If you were  Registered and logged in, you could reply and use other advanced thread options
The setting for password complexity is hard-code, either you use it or you
don't. Just one of those types of things. Although, you asked about GPMC, the
GPMC is a great utility for building and editing your group policies. Here is
link to the download for GPMC with svcpack 1... the latest version....

http://www.microsoft.com/downloads/details.aspx?FamilyID=0A6D4C24-8CBD-4B35-9272-DD3CBFC81887&displaylang=en

Goodluck...
--
CipherTeKST
MCSE: Security 2003, CCNA, Security+


"JohnM" wrote:

> In the Group Policy Management Console you can set up a gpo to make the user
> passwords complex. But it seems that the only option is not complex, 1
> character set required, or complex, 3 character sets required.
> How can I choose either 2 or 4 character sets required?
> Someone told me that Microsoft has a download for the GPMC that will allow
> this, but I cannot find it.
> Is that correct? If so, what is it called and where can I find it?
>
> Thanks,
> John

Similar ThreadsPosted
Password Complexity December 8, 2005, 12:32 pm
Password complexity May 12, 2008, 3:02 pm
Change password complexity July 14, 2008, 6:26 pm
MSBA - Password Complexity Checking July 7, 2005, 11:15 am
Password complexity in W2K Pro/Serv network September 12, 2005, 2:01 pm
Re: Password complexity in W2K Pro/Serv network October 4, 2005, 2:35 am
Re: Good password change fails due to complexity. September 1, 2005, 11:46 am
Good password change fails due to complexity. September 1, 2005, 11:34 am
AD 2003 Password Complexity and French Keyboard drivers May 16, 2007, 12:43 pm
Password Policy forces to change password - but too late... June 27, 2007, 6:32 am

The site map in XML format XML site map

Contact Us | Privacy Policy