We have about 400 NT and 2K (NOT AD) servers. These are mostly stand-alone IIS servers for various business customers.

We are getting ready to roll out passflt.dll to all servers, and I'm looking for an easy way to script this.

NT is a breeze. Just copy the passflt.dll file to the system32 folder and change or create the key: \HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Notification Packages=PASSFILT (REG_MULTI_SZ)

For 2K, first of all, M$ assumes that EVERYONE in the world is running AD (naturally) in their very instructions for activating. Second, they assume that NO ONE would possibly want to script such a solution.

My starting point are the following MS articles:
225230 and 161990

Can anyone suggest a way to activate complex passwords on 2K servers with either a reg edit or via a com object?

Thanks!

NMM