Active Directory Password Policy Complexity enable all 4 categories

Ochen Ao 11 Reputation points
2021-11-04T08:51:11.617+00:00

Hi,

I have a requirement from audit to enable all the 4 categories of the password complexity of the Password Policy. We already have complexity enabled so the criteria of the password complexity states that you need to meet any of the 3 of the 4 categories, i.e Uppercase, lowercase (6 chars min), digits[0-9], special characters. Is there a way that all the 4 categories can be enabled so you can force the user to have all 4 character types in their passwords.

Thanks.

Regards,

Ochen

Windows for business | Windows Client for IT Pros | Directory services | Active Directory
Windows for business | Windows Client for IT Pros | User experience | Other
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Gary Reynolds 9,621 Reputation points
    2021-11-04T09:11:32.41+00:00

    Hi @Ochen Ao

    AD only requires three of the complexity requirements to be meet when setting a password. You will need to purchase a third party password filter\control solution if you want more control over what password can set. Search for "windows ad password filter" for more options

    https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/password-must-meet-complexity-requirements

    Gary.

    1 person found this answer helpful.
    0 comments No comments

  2. Limitless Technology 39,926 Reputation points
    2021-11-04T19:13:16.62+00:00

    Hello @Ochen Ao

    In fact the ones you mention are the 4 complexity rules:

    1-Uppercase
    2-Lowercase
    3-Digit
    4-Special character

    Regarding the topic there is a very well explained discussion from different angles about setting and customizing additional complexities here: https://learn.microsoft.com/en-us/answers/questions/118459/custom-change-in-39password-must-meet-complexity-r.html

    Hope this helps with your query,

    ---------
    --If the reply is helpful, please Upvote and Accept as answer--

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.