The password minimum length should be 14 characters (no maximum limitation) The password must contain at least one character from each of the following :

a. Capital Letters (A-Z)
b. Small Letters (a-z)
c. Numbers (0-9)
d. Special Characters (@,$,&, etc);

Password is Case Sensitive ( Wind@ws8 is not WIND@ws8 )
The password must not contain the user’s user name or display name
The password must not contain numeric sequence of 3 or more(123,345, etc.).
The password must not contain 3 repeated characters (aaa,111,@@@, etc.).;

The account will be locked for 30 mins if 3 repeated authentication failures are detected Last 3 Previous passwords are not allowed to be re-used The user will be forced to change his/her password every 3 months