Basically: Password must not contain the user's entire Account Name. Password must contain an Uppercase character, a Lowercase character and a number (0 through 9). More info: http://technet.microsoft.com/en-us/library/cc786468%28v=ws.10%29.aspx