Forum Discussion

Joe Stocker's avatar
Joe Stocker
Bronze Contributor
Aug 13, 2018

Better Description of what StrongPasswordRequired does

Can anyone location MSFT Documentation for exactly what this does?

set-msoluser -StrongPasswordRequired $true

versus

set-msoluser -StrongPasswordRequired $false

The documentation on set-msoluser only states:

"Specifies whether to require a strong password for the user" https://docs.microsoft.com/en-us/powershell/module/msonline/set-msoluser?view=azureadps-1.0

But what I'm trying to find out is, what is the password policy for a strong password, and what is the policy for when this is set to false?

For example, Strong prevents you using your own username in the password, etc. ( I need the full policy definition on a Microsoft documentation site).

 

Thanks,

Joe

 

7 Replies

    • Joe Stocker's avatar
      Joe Stocker
      Bronze Contributor
      Thanks Dean. I've read that document multiple times but I can't seem to find what the *policy* difference is when this parameter is set to true or false?
      StrongPasswordRequired $true vs StrongPasswordRequired $false
      For example, Strong prevents you using your own username in the password? Anything else?
      Thanks!
      • Ipsito_Dutta's avatar
        Ipsito_Dutta
        Brass Contributor

        A little late, but just wanted to complete the thread.

         

        Strong passwords only:

         

        -Requires three out of four of the following:
        -Lowercase characters.
        -Uppercase characters.
        -Numbers (0-9).
        -Symbols:
        --A – Z
        --a - z
        --0 – 9
        --@ # $ % ^ & * - _ ! + = [ ] { } | \ : ‘ , . ? / ` ~ " ( ) ;
         
        https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-policy

Resources