Powershell command to set password complexity policy in Azure AD

Question

Will be moving my users to AD cloud and disconnecting the AAD connect

How can I set the password complexity to meet the following requirements

Minimum characters 12
Cannot contain login name or name of the user
Contains alphanumeric characters
Max pwd age 90 days
Min pwd age 24hrs
History - last 15 passwords

Answer 1

Hello @Chopra ,

Thanks for reaching out.

You can't customize Azure AD default password policy. Some of these password policy settings can't be modified, though you can configure custom banned passwords for Azure AD password protection or account lockout parameters

To know more about Azure AD password policies, refer.

Hope this helps.

------
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Answer 2

The only thing you can modify is the max password age and notification window, this is done via the Set-MsolPasswordPolicy cmdlet on a per-domain basis. If you want more control over this, or to enforce your AD policies, consider using federation or pass-trough authentication.

Answer 3

You shouldn't.

Don't focus to much on making passwords complex because this will not increase security. Focus on:

1. Implementing MFA.
2. Disable legacy authentication.
3. Implement Azure Identity protection (leaked passwords, risky users / sign-ins)
4. etc etc