Hi, Thank you in advance for any information that you can provide. Our product is integrated with Active Directory, to authenticate our customers. We would like to use Active Directory's API to check new passwords against a dictionary (i.e. refuse new passwords that use normal words). This validation step is intended as an effort to reduce our vulnerability to dictionary attacks. 1. Is this type of password validation functionality available via AD? 2. If so, are the messages that result from failed validations fairly descriptive? For example, what would be the response to a password that contained the word "password." We will not utilize AD if the responses are too generic. 3. What API calls would be involved? Many thanks. Nathan
