Calling all NT Network Admins

[trotsky]

Yes, NT Domain, not Active Directory (which has this feature built-in, of course).

I am still responsible for one NT domain and I want to enable strong password functionality as detailed in the following MS knowledge base article:
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q161990

Just wondering if there is anyone in here that has done this, because my concerns is: When I enable this, does it instantly invalidate current passwords that don't meet the requirements, or does it wait until the next password expiration to enforce?

[trotsky]

1. For anyone who is interested, I think I found the answer.

http://www.windowsitlibrary.com/Content/638/06/1.html

The strong password functions are enabled when a password change request is made by a client over the network (weak passwords will be rejected because the Passfilt.dll is implemented under these circumstances).

I read that as being the strong password DLL doesn't actively look at existing passwords, but only intercepts password change requests. Interesting stuff.

[Osamasux]

2. Usually these are just at the next change.

I don't remember this one in particular, sorry.