Share via

Does Azure AD Password Protection filter dll include minimum number of changed characters logic?

Leonard Gilbert 146 Reputation points
2023-06-22T20:26:04.0533333+00:00

As I understand it, this was a common standard for password changes starting about 10 years ago with different standards. I'm wondering if this is now utilized in both Azure normally for cloud accounts and through the AAD Password Protection agent that gets installed on DCs. I'm asking because my company is planning to migrate from our 3rd party tool that has this functionality which requires at least 3 characters are different from the current password to avoid increment abusers. Link is for reference. If not, in general is there any guidance on why that might be an outdated practice?

https://community.spiceworks.com/topic/476695-password-changing-need-to-change-more-than-one-character

Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Microsoft Security | Microsoft Entra | Microsoft Entra ID
Windows for business | Windows Server | User experience | Other
0 comments
Accepted answer
  1. Limitless Technology 44,771 Reputation points
    2023-06-23T13:56:28.9933333+00:00

    Hello there,

    Azure AD Password Protection (AAD Password Protection) does not include a built-in filter DLL for enforcing a minimum number of changed characters. The filter DLLs provided by AAD Password Protection focus on preventing the use of weak and commonly used passwords by checking against a list of known passwords.

    The AAD Password Protection filter DLLs operate by intercepting password change requests at the Domain Controller (DC) level and enforcing password policies before they are applied. These filter DLLs utilize a dynamic, cloud-based banned password list to block the use of weak passwords.

    I used AI provided by ChatGPT to formulate part of this response. I have verified that the information is accurate before sharing it with you.

    Hope this resolves your Query !!

    --If the reply is helpful, please Upvote and Accept it as an answer–

    1 person found this answer helpful.
    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.