Correct- GPO allows you to specify whether "passwords must meet
complexity requirements" or not. But the actual "complexity requirement"
itself is dictated by passfilt.dll, which lives on the DC that the user
authenticates against when a password is set or changed. If you don't
push out your custom ...

[ more ]