Hello mby-5376,
Thank you for posting in our Q&A forum.
From the title "exclude character from password policy", do you mean you want to exclude specific character when you set or change the user's passwords (for example, you want to exclude specific “A or a” character when you set or change the user's passwords)?
If so, the password policy is defined as below:
1-Enforce password history
2-Maximum password age
3-Minimum password age
4-Minimum password length
5-Store passwords using reversible encryption
6-Password must meet complexity requirements
We cannot exclude specific character for entries 1-5 above. And for 6-Password must meet complexity requirements, when we enabled it, this setting requires passwords to meet the following requirements:
1.Passwords may not contain the user's samAccountName (Account Name) value or entire displayName (Full Name value). Neither of these checks is case-sensitive.
2.The password contains characters from three of the following categories:
Uppercase letters of European languages (A through Z, with diacritic marks, Greek and Cyrillic characters)
Lowercase letters of European languages (a through z, sharp-s, with diacritic marks, Greek and Cyrillic characters)
Base 10 digits (0 through 9)
Non-alphanumeric characters (special characters): (~!@#$%^&*_-+=`|(){}[]:;"'<>,.?/) Currency symbols such as the Euro or British Pound aren't counted as special characters for this policy setting.
Any Unicode character that's categorized as an alphabetic character but isn't uppercase or lowercase. This group includes Unicode characters from Asian languages.
Password Policy
https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/password-policy
So, anyway, we cannot exclude specific character when you set or change the user's passwords through default password policy.
Hope the information above is helpful.
Best Regards,
Daisy Zhou
===============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.