


The displayName is parsed for delimiters: commas, periods, dashes or hyphens, underscores, spaces, pound signs, and tabs. If the samAccountName is fewer than three characters long, this check is skipped. The samAccountName is checked in its entirety only to determine whether it's part of the password. Neither of these checks is case-sensitive. Passwords may not contain the user's samAccountName (Account Name) value or entire displayName (Full Name value). When enabled, this setting requires passwords to meet the following requirements: The Passwords must meet complexity requirements policy setting determines whether passwords must meet a series of strong-password guidelines. Describes the best practices, location, values, and security considerations for the Password must meet complexity requirements security policy setting.
