You'd have to put them in a different domain within the forest. And though
you couldn't enforce complex pwds for just select users in the same domain,
you could require smart-cards for those users if that helps.

t

----- Original Message -----
From: "RIFAN Mohammed" <m_rifan (at) yahoo.co (dot) uk [email concealed]>
To: <...

[ more ]