I just implemented a strong password policy on a Windows 2000 domain using a domain policy. However, this does not affect VPN clients (they use the Microsoft VPN client). I clicked on "User must change password on next login" for my own account. I then logged in from the outside using VPN. I was prompted to change my password, but I was able to change it to "Cat". My policy says you must have at least 7 characters in your password. How do I enforce strong passwords to my VPN clients?