Better Description of what StrongPasswordRequired does

Question

Can anyone location MSFT Documentation for exactly what this does?

set-msoluser -StrongPasswordRequired $true

versus

set-msoluser -StrongPasswordRequired $false

The documentation on set-msoluser only states:

"Specifies whether to require a strong password for the user" https://docs.microsoft.com/en-us/powershell/module/msonline/set-msoluser?view=azureadps-1.0

But what I'm trying to find out is, what is the password policy for a strong password, and what is the policy for when this is set to false?

For example, Strong prevents you using your own username in the password, etc. ( I need the full policy definition on a Microsoft documentation site).

Thanks,

Joe

stevenc365 · Answer

Also, don't do it! It's shown that adding password complexity doesn't really decrease the risk in your environment. Better to use AzureAD SSPR and AzureAD Password Protection to ensure your users don't pick common passwords.
NIST guidance no longer recommends complex passwords, or regularly changing passwords.

dean_gross · Answer

see https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-policy

FYI, i would start using the Azure AD Powershell V2 module https://www.powershellgallery.com/packages/AzureAD/2.0.1.16

Set-msoluser is being phased out

joe stocker · Answer

Thanks Dean. I've read that document multiple times but I can't seem to find what the *policy* difference is when this parameter is set to true or false?
StrongPasswordRequired $true vs StrongPasswordRequired $false
For example, Strong prevents you using your own username in the password? Anything else?
Thanks!

ipsito_dutta · Answer

A little late, but just wanted to complete the thread.

Strong passwords only:

-Requires three out of four of the following:
-Lowercase characters.
-Uppercase characters.
-Numbers (0-9).
-Symbols:
--A – Z
--a - z
--0 – 9
--@ # $ % ^ & * - _ ! + = [ ] { } | \ : ‘ , . ? / ` ~ " ( ) ;

https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-policy

adam deltinger · Answer

Yeah! Totally agree! And SSPR is an awesome feature

Forum Discussion

Better Description of what StrongPasswordRequired does