search for: march2015

...set their passwords at the next login. Combined with a password history, a good minimum length and minimum age, it's the best you can do. However even if you enable all that, this doesn't prevent users from choosing stupid passwords: "January2015", "February2015", "March2015",... They are all valid, because they meet the minimum 3 of the 5 character categories (https://technet.microsoft.com/en-us/library/cc786468%28v=ws.10%29.aspx) and they won't even get in conflict with the password history policy. Regards, Marc

Hi, Is it possible to test our AD for weak passwords? We have set max password age, and password complexity etc. However, we would like to know that the passwords that are CURRENTLY still in the system are good or weak. Perhaps some kind of tool to test dictionary passwords etc, but preferably locally on the /var/lib/samba databases to not lockout the accounts due to too many failed