-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Microsoft has source code available for creating your own version of
passfilt.dll. I will highly recommend doing this if you do not want
to purchase third-party software. Additionally you should implement
the various recommendations given by Microsoft and others concerning
issues like LM/NTLM hash storage, using LM/NTLMNTLMv2 across the
network, the saving of cached logon credentials on servers and
workstations etc.

Regards,
Per Thorsheim
CISA, CISM, CISSP-ISSAP

- -----Opprinnelig melding-----
Fra: listbounce (at) securityfocus (dot) com [email concealed]
[mailto:listbounce (at) securityfocus (dot) com [email concealed]] På vegne av dubaisans dubai
Sendt: 15. august 2007 08:15
Til: focus-ms (at) securityfocus (dot) com [email concealed]
Emne: Password complexity - improvement

Is there a way to improve the password complexity requirements in
Windows 2000/2003 servers

The default will enforce 3 of the following 4 properties - Uppercase,
smallercase, numbers, special-characters.

Is there a way to enforce all 4 properties. I donot want to install
third-party software

I have read about customising passfilt.dll . Is that recommended.
Does MS provide a customised passfilt.dll for download and install.

Are there any support issues if I go for something like this ?

-----BEGIN PGP SIGNATURE-----
Version: PGP 8.1

iQA/AwUBRsM+A7F5fmPQ0K72EQIyHQCgkSXkESbIfgf5Th3vHQDtfL8VcwQAoMAJ
qRAuos+bDoWV+MQAY0Xsvbsd
=y0Kh
-----END PGP SIGNATURE-----

[ reply ]