Re: Password Strength in Active Directory

From: Torgeir Bakken (MVP) (Torgeir.Bakken-spam@hydro.com)
Date: 01/12/03


From: "Torgeir Bakken (MVP)" <Torgeir.Bakken-spam@hydro.com>
Date: Sun, 12 Jan 2003 02:39:28 +0100


Doug wrote:

> Does anyone know of a way to use the native AD password
> strength setting but make it force users to use all for
> character classes (uppercase, lower case, numbers and
> special characters)? Currently it only enforces three of
> those. I'm thinking there must be some sort of add in but
> can't find anything on Technet about it.

Hi

You need to create a custom password filter (a.k.a. programming a new dll).

From
Passwords must meet complexity requirements of the installed password filter
http://msdn.microsoft.com/library/en-us/gp/504.asp

"To create custom password filters, refer to the Microsoft Platform Software
Development Kit and the Microsoft Knowledge Base."

For customized Password Policy (anything other than the default), you can look
at Password Filter SDK sample code in folder
%mssdk%\Samples\WinBase\Security\WinNT\PwdFilt, if you have installed Microsoft
Platform SDK.

The documentation for password filter programming is at

Password Filters
http://msdn.microsoft.com/library/en-us/security/security/password_filters.asp

The SDK can be downloaded by installing the "Core SDK" from
http://www.microsoft.com/msdownload/platformsdk/sdkupdate/

--
torgeir
Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and a ONLINE version of the 1328 page
Scripting Guide: http://www.microsoft.com/technet/scriptcenter


Relevant Pages

  • Re: Windows Mobile 5.0 SDK Install Problem
    ... installing it. ... "Software development tools required to use this SDK for application ... Microsoft Visual Studio 2005 Version 8.0.50727.42 ...
    (microsoft.public.pocketpc.developer)
  • Windows Mobile 5.0 SDK Install Problem
    ... installing it. ... "Software development tools required to use this SDK for application ... Microsoft Visual Studio 2005 Version 8.0.50727.42 ...
    (microsoft.public.pocketpc.developer)
  • Re: Password Filter implementation
    ... Do you have to have the SDK to implement passfilt.dll? ... > I want to create my own password filter, and I have tried to implement it ... > in a DLL as specified by Microsoft. ... > When I try to install the PassWord filter by: ...
    (microsoft.public.platformsdk.security)
  • Re: Password complexity in W2K Pro/Serv network
    ... Do the passfilt's only work in a NT 4.0 sp2 scenario? ... I am reading about in the SDK has references to 4.0 sp2 only. ... > write your own password filter. ... > Jon LaBarge wrote: ...
    (microsoft.public.security)
  • Re: Password Filter implementation
    ... > I want to create my own password filter, and I have tried to implement it ... > in a DLL as specified by Microsoft. ... > When I try to install the PassWord filter by: ... At the command prompt type ...
    (microsoft.public.platformsdk.security)