Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Here it states that the policy must adhere to

  • Passwords must meet complexity requirements determines whether password complexity is enforced. If this setting is enabled, user passwords meet the following requirements:

  • The password is at least six characters long.

  • The password contains characters from at least three of the following five categories:

    • English uppercase characters (A - Z)

    • English lowercase characters (a - z)

    • Base 10 digits (0 - 9)

    • Non-alphanumeric (For example: !, $, #, or %)

    • Unicode characters

  • The password does not contain three or more characters from the user's account name.

They only setting is to ENABLE or DISABLE this feature.

I was wondering if there is a way to change this policy? IF so where?

share|improve this question
I've been wondering this, too. Thanks for asking! – Matt Simmons Jun 3 '09 at 9:40
up vote 5 down vote accepted

You can do so using a Password Filter, but its a pretty complex to do so. See this article on how to do so.

There are a number of third party password filters availible to do this such as:

share|improve this answer
+1 for the 3rd-party options, didn't even realise they existed. – ThatGraemeGuy Jun 3 '09 at 9:48

It can be done by writing your own custom password filter DLL, which needs to be installed on each DC in your domain/s. MSDN and/or TechNet will have the details, but it's not simple from what I understand.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.