ds: password complexity rules...

in case you're asked for it, like i am, all the time, as in ... yesterday, today, tomorrow...

Do not contain all or part of the user's account name.

Contain characters from three of the following four categories:

• English uppercase characters (A through Z).
• English lowercase characters (a through z).
• Base-10 digits (0 through 9).
• Non-alphanumeric (for example, !, $, #, %). extended ASCII, symbolic, or linguistic characters.

i believe in cases where it refers to "part of the user's account name" it specifically means 3 or more characters in a row. for example, since my name is "marcus" i can't have the letters "arc" or "rcu" or "mar" in my password. it's not referenced in the following article but is referenced in a sql 2005 article. anyway, here's more detail from the article...