The complexity rule ensures that passwords meet the following minimum complexity requirements:
- Not contain the user's account name or parts of the user's full name that exceed two consecutive characters
- Be at least six characters in length
- Contain characters from three of the following four categories:
- English uppercase characters (A through Z)
- English lowercase characters (a through z)
- Base 10 digits (0 through 9)
- Non-alphabetic characters (Supported characters are ~`!#$%\^&*+=-[];,/{}._|":<>?()@
The complexity rule imposes the same requirements as the standard Windows policy “Password must meet complexity requirements.”
To configure the complexity rule
- Follow the steps outlined in Configuring Password Policy Rules.
- On the Policy Rules tab, click Complexity Rule to expand the rule settings.
- Under Complexity Rule, select the Password must meet complexity requirements check box.