Complex Passwords

27 Jan 2006 6:40 PM

Dan Andryszak

I have two questions:

Can I use Windows 2000 Group Policy to enable complex passwords and set a
mask that the password must be a minimum of 6 characters and the 2nd
character be a numeric value?

Can I use Windows 2000 Group Policy to require a complex password on NT 4.0
machines? I know if I set complex password at the domain level, my 2000
machines and above will react correctly, but what will a NT 4.0 workstation /
server do?

27 Jan 2006 11:51 PM

Ace Fekay [MVP]

In news:677702D2-7867-422E-912A-7F369DEE9E80@microsoft.com,

Dan Andryszak <DanAndrys***@discussions.microsoft.com> stated, which I
commented on below:

> I have two questions:
>
> Can I use Windows 2000 Group Policy to enable complex passwords and
> set a mask that the password must be a minimum of 6 characters and
> the 2nd character be a numeric value?

No, you can't force specific characters to be numeric or anything, unless
someone else has figured that out.

>
> Can I use Windows 2000 Group Policy to require a complex password on
> NT 4.0 machines? I know if I set complex password at the domain
> level, my 2000 machines and above will react correctly, but what will
> a NT 4.0 workstation / server do?

GPOs can't work with NT4, WIn9x or Win98, but when a user attempts to change
their password, the password restrictions set at the domain level will give
the user an error settting the password saying it's not conforming to
password requirements.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

If you are having difficulty in reading or finding responses to your post,
instead of the website you are using, if I may suggest to use OEx (Outlook
Express or any other newsreader of your choosing), and configure a newsgroup
account, pointing to news.microsoft.com. This is a direct link into the
Microsoft Public Newsgroups, and it is FREE and DOES NOT require a Usenet
account with your ISP. With OEx, you can easily find your post, track
threads, cross-post, and sort by date, poster's name, watched threads or
subject.

Not sure how? It's easy:
How to Configure OEx for Internet News
http://support.microsoft.com/?id=171164

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Windows Server Directory Services
Microsoft Certified Trainer
Assimilation Imminent. Resistance is Futile.
Infinite Diversities in Infinite Combinations.
=================================

30 Jan 2006 9:28 PM

Kurt Roggen

Nope,
Nope,
Nope, not even 2003
However have a look at http://www.anixis.com/products/ppe/default.htm

--
Kurt Roggen
http://blogontheweb.com/roggenk

Show quoteHide quote

"Dan Andryszak" <DanAndrys***@discussions.microsoft.com> wrote in message
news:677702D2-7867-422E-912A-7F369DEE9E80@microsoft.com...
>I have two questions:
>
> Can I use Windows 2000 Group Policy to enable complex passwords and set a
> mask that the password must be a minimum of 6 characters and the 2nd
> character be a numeric value?
>
> Can I use Windows 2000 Group Policy to require a complex password on NT
> 4.0
> machines? I know if I set complex password at the domain level, my 2000
> machines and above will react correctly, but what will a NT 4.0
> workstation /
> server do?
>

31 Jan 2006 12:36 AM

Ace Fekay [MVP]

In news:eirDkSeJGHA.500@TK2MSFTNGP15.phx.gbl,

Kurt Roggen <rog***@guidance.be> stated, which I commented on below:

> Nope,
> Nope,
> Nope, not even 2003
> However have a look at http://www.anixis.com/products/ppe/default.htm

Interesting product. Thanks for posting it. :-)