.png?width=100&auto=webp&quality=80&disable=upscale "Picture of John Savill")
.png?width=400&auto=webp&quality=80&disable=upscale "John Savill")
Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
How do I enable strong password filtering?
John Savill
December 21, 1999
1 Min Read
A. Windows NT 4.0 Service Pack 2 introduced a new password filter, passfilt.dll, which implements the following new restrictions
Passwords must be at least 6 characters long
Passwords must meet at least 3 of the following criteria
- Uppercase letters A-Z
- Lowercase letters a-z
- Number(s) 0-9
- Non-alphanumeric character (e.g. !, etc.)Password may not contain your user name or any part of your full name
To enable this functionality perform the following on all PDC's (and stand alone's if used). You do not need to install this on BDC's, however you should in case the BDC is promoted to a PDC.
Start the registry editor (regedt32.exe, do not use regedit.exe)
Move to HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlLsa
Double click on "Notification Packages"
Add PASSFILT on a new line (there may be a FPNWCLNT so you should add this after this value). Click OK
Close the registry editor
Reboot the machine
It should be noted you will still be able to set passwords in User Manager that do not meet the criteria, this is by design as direct SAM updates are not filtered.
About the Author
You May Also Like
.jpg?width=700&auto=webp&quality=80&disable=upscale)
