Active Directory Password Policy Complexity enable all 4 categories

Question

Hi,

I have a requirement from audit to enable all the 4 categories of the password complexity of the Password Policy. We already have complexity enabled so the criteria of the password complexity states that you need to meet any of the 3 of the 4 categories, i.e Uppercase, lowercase (6 chars min), digits[0-9], special characters. Is there a way that all the 4 categories can be enabled so you can force the user to have all 4 character types in their passwords.

Thanks.

Regards,

Ochen

Answer 1

Hi @Ochen Ao

AD only requires three of the complexity requirements to be meet when setting a password. You will need to purchase a third party password filter\control solution if you want more control over what password can set. Search for "windows ad password filter" for more options

https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/password-must-meet-complexity-requirements

Gary.

Answer 2

Hello @Ochen Ao

In fact the ones you mention are the 4 complexity rules:

1-Uppercase
2-Lowercase
3-Digit
4-Special character

Regarding the topic there is a very well explained discussion from different angles about setting and customizing additional complexities here: https://learn.microsoft.com/en-us/answers/questions/118459/custom-change-in-39password-must-meet-complexity-r.html

Hope this helps with your query,

---------
--If the reply is helpful, please Upvote and Accept as answer--