I refreshed my memory on security templates at the Microsoft site. This *might* work on the security level, but then I'm still left with the problem of how to script implementing the template. I need to create an extremely reliable and extremely simple solution for this to work. (I.e., pop a diskette in each system and type a:\passfilt)

Part of what makes things so difficult in our environment is that (with the exception of our internal domain for users), these 400 systems are all isolated into about 35 groups with different local admin passwords, and even network isolation. The reason is because we are business partners with a lot of different companies, and we have contractual agreements to ensure their information and software is isolated from all other groups.

So our situation is the opposite of most networks, where servers may be physically located in different areas, but tied together in a single domain and/or Active Directory structure. Instead, this is like having to provide a simple solution to 35 different companies. And keep in mind that these companies are all running various home grown and third party apps on their systems. If we break their apps, we lose business. So every change must be tested extensively. This pretty much rules out a blanket security template approach.

Back to the original question... any ideas how I can activate password complexity requirements on stand-alone Windows 2000 servers via a script?

Thanks,

NMM