Generate Strong Password Format Control Policies

Click the Advanced Policy button to add forbidden character sequences:

Select the following check boxes:

New and current passwords can't have the same characters at the same position to force the order modification of the characters. Example: if this check box is selected and the old password was apricot, then the new password cannot be apple but parrot for example.

This option is case sensitive to authorize or forbid upper case or lower case letters to be considered as identical letters in the password. Example: If the check box is not selected, then a=A.

Password cannot contain the user's login or display name to prevent the user from using his name or login (sAMAccountName) to create his password. This restriction applies to names longer than 3 characters. Example: the password of John Fab Smith can neither contain John nor Smith but can contain Fab.
This option is available only with Microsoft directories.

Use the Add and Remove buttons to manage the forbidden character sequences, such as QWERTY or 12345.

1. In the Allowed characters area, set the number of lower case and upper case letters, digits, special characters and the list of these special characters allowed in passwords and their position.
   The Special character list field enables you to specify which of these characters must appear in the password.
   You can also force the use of 3 categories of characters out of the 4 available.
2. In the Forbidden characters area, create a list of forbidden characters.
3. Click the Test password generation button to check if the generated passwords correspond to your requirements.