Restricted password lists in Windows 2003 Server

[Curiosityx]

Greetings, does anyone know of a method where by a policy can be set that prevents users from using weak or common passwords, im well aware that you can set the complexity requirements as well as the length but this doesn't disallow users from using such combinations as "Password01" "Password02" etc which does match complexity requirements.

Regards

 

[stoofa]

I could be wrong - but I was 99% sure that under the "Must use complex password" policy there was a way of listing workds that were not allowed.
So for example you could add the word "password" or "letmein" or "root2root" and if those words appeared in the password it would be disallowed.

I'll try and find where that option is.

 

[Curiosityx]

I could be wrong - but I was 99% sure that under the "Must use complex password" policy there was a way of listing workds that were not allowed.
So for example you could add the word "password" or "letmein" or "root2root" and if those words appeared in the password it would be disallowed.

I'll try and find where that option is.

Would be much appreciated.

Regards

 

[VeNT]

complexity requires letters, numbers, capitalisation and a non alphanumeric char (£$%!"^&*) etc so Password, Password01 etc would not work
Pa$$w0rd would.

 

[Curiosityx]

complexity requires letters, numbers, capitalisation and a non alphanumeric char (£$%!"^&*) etc so Password, Password01 etc would not work
Pa$$w0rd would.

Sorry but "Password01" and associated variations do work this has been tried and tested over many server builds and with complexity requirements turned on.

 

[VeNT]

very odd.
when I try it (VM of sbserver 2003) Password01 doesn't work

anyone got ideas