Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am using Active Directory as a data store for the users of my website. I have Active Directory throwing the following exception in case password does not meet any password policy constraint.

The password supplied is invalid. Passwords must conform to the password strength requirements configured for the default provider.

Can I customize this error messages/notifications in any way to be them more specific?

What I want is that - If 'password history' is the constraint that is violated then the error message should say so (ex. New password should be different than the last 10 used passwords)

share|improve this question
DOes this happen when users change their passwords? How are the users changing their passwords? – simon May 24 '11 at 11:09

I'd try something like this to catch the error in code:Security Policy and Password Complexity with Active Directory Membership Provider

share|improve this answer
Wow, is this really the best way to do it? So Microsoft's code is doing all this checking, yet returning no useful error message when it would be trivial to do so. We have to basically re-implement the whole thing, returning a useful error message. Nice going, Microsoft. – Jez Aug 10 '15 at 12:17

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.