ADPasswordFilter v1.0
Adds additional password complexity constraints when users attempt to change passwords in
a Windows environment. The MSI package can be installed to a workstation to filter password changes on
local accounts or it can be installed to domain controllers to filter password changes on active directory
accounts. The complexity requirements this filter adds are:
- Passwords must be between 8 and 127 characters
- Passwords must have at least one character from each of these four classes: uppercase, lowercase, numeric, and punctuation
- Passwords can not contain characters that are whitespace characters, control characters, or extended characters
- Passwords can not contain your username forwards or backwards
- Passwords can not contain any 5 character sequences of: repeated characters, incrementing characters, keyboard layouts
This password filter logs both successes and failures for password changes to the windows event
log. The event logging for successes and failures can be turned off through registry settings.
|
|
|
- Win32 / Win64 (Microsoft Windows)
|
|
- System Administrators, Developers, Security Auditors
|
|
|
|
- Microsoft Windows Server 20003 / 2008
|
|
|
|
- Security / Active Directory
|