[humbletech99]

I have a Windows 2003 Active Directory domain and am trying to increase the password complexity requirements.

However, it seems as though the password complexity requirements are an all or nothing setting. Either I can choose to have no password complexity enforced or users must use 3 out of the 4 character types which is actually pretty difficult to think up, remember and not write down etc.

Is there a way that I can enforce password creation of passwords that meet 2 out of 4 of the character types? (ie any 2 out of the 4 of lowercase, uppercase, numbers and symbols)

[lunarlander]

3 out of 4 complexity passwords are not that difficult to create if you tell your users its a pass-Phrase, instead of password