;Password Is NOT Compliant with the System Password Complexity Policy

;The information in this article applies to:
;Microsoft Windows 2000 Server
;Microsoft Windows 2000 Advanced Server
;Microsoft Windows 2000 Professional
;Microsoft Small Business Server 2000

;This article was previously published under Q279890 

;SYMPTOMS:
;If the administrator generates passwords For a user through the Add User Wizard,
;it may NOT meet the requirements that are Set by the System Password Complexity
;policy but they may be accepted anyway. The same behavior can occur If the administrator
;attempts to specify the Password For a user. 

;CAUSE:
;This behavior occurs because the Password is NOT compliant with the System Password
;Complexity policy. The Passfilt.dll file implements the following Password policy: 
	
   ;Passwords must be AT least SIX or EIGHT characters long.
      ;(Check your local password policies)
   ;Passwords may NOT contain your user name OR any part of your full name.
   ;Passwords must contain characters from AT least three of the following four classes:

      ;Description Examples: 
      ;English upper Case letters A, B, C, ... Z 
      ;English lower Case letters a, b, c, ... z 
      ;Westernized Arabic numerals 0, 1, 2, ... 9 
      ;Non-alphanumeric ("special characters") Punctuation marks AND other symbols 

;These requirements are hard-coded in the Passfilt.dll file AND cannot be changed
;through the user interface OR registry. If you want to change these requirements,
;you must write your own .dll AND implement it in the same way as the Microsoft
;version that is available with Windows NT 4.0 Service Pack 2. 

;WORKAROUND:
;To work around this behavior, as the administrator, when you Use the Add User Wizard,
;Select the I will specify user's password option, and then type in a password that
;meets the System Password Complexity policy requirements.

$Computer = "Dclnwpurch"
$NewUser = "TUser"
$NewPassword = "ABcd12!@"
$Group = "Administrators"
$FullName = "Test User"
$Domain = "DCL"

CreateLocalUserAccount ($Computer,$Domain,$NewPassword,$NewUser,$FullName,$Group)

Function CreateLocalUserAccount ($Computer,$Domain,$NewPassword,$NewUser,$FullName,$Group)

   $Accounts = GetObject("WinNT://" + $Domain + "/" + $Computer + ",Computer")
   $User = $Accounts.Create("user", $NewUser)
   $SetUserPassword = $User.ChangePassword("", $NewPassword)
   $User.SetPassword ($NewPassword)
   $User.Put ("FullName", $FullName)
   $User.Put ("Description", "Script Automated Discription")
   $User.Put ("HomeDirDrive", "T")
   $User.Put ("HomeDirectory", "C:\Users\" + $NewUser)
   $User.Put ("Profile", "C:\Profiles\" + $NewUser)
   $User.Put ("LoginScript", "C:\Scripts\logonscript.exe")
   $User.SetInfo
   
   AddUserToLocalGroup ($Computer,$NewUser,$Group)

EndFunction

Function AddUserToLocalGroup ($Computer,$NewUser,$Group)

   $objGroup = GetObject("WinNT://" + $Computer + "/" + $Group + ",group")
   $objUser = GetObject("WinNT://" + $Computer + "/" + $NewUser + ",user")
   $objGroup.Add($objUser.ADsPath)

EndFunction