Re: Define Complex Passwords

It is built in now, if you want to create your own password filter you have to write it in c/c++ and then install it and tell AD to use it. This is documented in the password filter section of MSDN.

This is not TRIVIAL. If you screw it up, you will break your DCs or open nasty security holes.

joe

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm



CK wrote:
How would you use the passflt.dll with AD?
.

Relevant Pages

  • Re: Password Filter implementation
    ... Do you have to have the SDK to implement passfilt.dll? ... > I want to create my own password filter, and I have tried to implement it ... > in a DLL as specified by Microsoft. ... > When I try to install the PassWord filter by: ...
    (microsoft.public.platformsdk.security)
  • Re: Maximum password age - Need Proof
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... command prompt and that will give him the password requirements. ... Mind you if you have another password filter in place this command ...
    (microsoft.public.win2000.active_directory)
  • Re: Password Filter implementation
    ... > I want to create my own password filter, and I have tried to implement it ... > in a DLL as specified by Microsoft. ... > When I try to install the PassWord filter by: ... At the command prompt type ...
    (microsoft.public.platformsdk.security)
  • Re: Custom password filter
    ... You can use the password filter to filter domain or local account ... which will tell you how to install and write. ... >Subject: Custom password filter ...
    (Security-Basics)
  • Re: Creating Password Filter
    ... Joe Richards Microsoft MVP Windows Server Directory Services ... Douglas Lecato wrote: ... > I'm trying to learn how to create a Password Filter that will only require my ...
    (microsoft.public.platformsdk.security)