How?

26*26*10*(however many special characters you want to allow) > 26*26*10

-----Original Message-----
From: listbounce (at) securityfocus (dot) com [email concealed] on behalf of Ansgar -59cobalt- Wiechers
Sent: Wed 8/15/2007 2:39 PM
To: focus-ms (at) securityfocus (dot) com [email concealed]
Cc:
Subject: Re: Password complexity - improvement

On 2007-08-15 dubaisans dubai wrote:
> Is there a way to improve the password complexity requirements in
> Windows 2000/2003 servers
>
> The default will enforce 3 of the following 4 properties - Uppercase,
> smallercase, numbers, special-characters.
>
> Is there a way to enforce all 4 properties.

Enforcing passwords that MUST consist of uppercase letters, lowercase
letters, numbers AND special characters reduces the total number of
possible passwords, which in consequence has a negative impact on your
security.

Regards
Ansgar Wiechers
--
"All vulnerabilities deserve a public fear period prior to patches
becoming available."
--Jason Coombs on Bugtraq

[ reply ]