I believe what you are referring to is the NSA's EnPasFlt.dll filter. That
enforces passwords of at least 8 characters and 4 character sets. This is
only available to government agencies and the docs say it can handle a
maximum of 500 password changes at once.
Another tool is Password Policy Enforcer:
http://www.anixis.com/products/ppe/default.htm. This tool has more advanced
features and is a bit friendlier to end users.
Of course, the friendliest--and mathematically equivalent--thing is to just
enforce long passwords and make the use of character sets optional.
Mark Burnett
--------------------
"Perfect Passwords"
-----Original Message-----
From: Strand, John (Mission Systems) [mailto:John.Strand@ngc.com]
Sent: Friday, July 28, 2006 2:05 PM
To: Mueller, Daniel; focus-ms@securityfocus.com
Subject: RE: Password Filtering
Look at the password filter in the DISA SSR .zip package... It might do
this.
john
-----Original Message-----
From: Mueller, Daniel [mailto:daniel.mueller@nmci-isf.com]
Sent: Friday, July 28, 2006 12:12 PM
To: focus-ms@securityfocus.com
Subject: Password Filtering
Does anyone have data or tools for modifying the PASSFILT.DLL to ensure
passwords use all 4 character sets vice 3? New requirements at work
require this to be enforced.
Thanks
Dan
-----------------------------------------------------------------------
-
---
-----------------------------------------------------------------------
-
---
-----------------------------------------------------------------------
----
-----------------------------------------------------------------------
----
---------------------------------------------------------------------------
---------------------------------------------------------------------------
