2 out of 4 password complexity requirements?

[humbletech99]

I have a Windows 2003 Active Directory domain and am trying to increase the password complexity requirements.

However, it seems as though the password complexity requirements are an all or nothing setting. Either I can choose to have no password complexity enforced or users must use 3 out of the 4 character types which is actually pretty difficult to think up, remember and not write down etc.

Is there a way that I can enforce password creation of passwords that meet 2 out of 4 of the character types? (ie any 2 out of the 4 of lowercase, uppercase, numbers and symbols)

 

[juniper911]

I do not think you can modify the password complexity template, you will need to customise/create your own for that.

there seems to be others who also want to do this..

http://www.webservertalk.com/message320070.html

 

[humbletech99]

yes this is what I thought, you can write your own passfilt.dll but this is non trivial and requires a very confident programmer in compiled languages.

I wouldn't bet my AD on this even if I could write it.