We’re implementing Group Policies in our Win2k Active Directory domain. We’d like to implement the forced password complexity policy, but, how does Windows 2000 Server define a “complex” password? I can’t find details about this.
Microsoft’s support page suggests enabling the policy. The policy is an “On / Off” setting without an option to set what our agency can define as Complex.
So my question is: If I enable this policy, what is the server going to require of a password to consider it complex? Letters, Numbers and a Symbol? Capitals, Lower case, Numbers and Symbols? Letters and numbers only? (I’ve even thumbed through some of our paper reference guides without any explanation.)