Password Policy Enforcer is intended to enforce the desired password policies, mainly at a corporate level. In this respect, the tool can check that newly-created passwords meet the desired strength conditions. Fortunately, the rules work not only locally but also at the domain level. The tool's interface integrates perfectly with that of the operating system. In fact, one of its advantages is that it does not substitute the system's files. For me, it seems logical that it looks rather technical, without unnecessary adornments.
In terms of features, Password Policy Enforcer allows implementing specific rules for given user groups, depending on their privilege levels. Likewise, it is also possible to enforce global rules, which any user should comply with. It is also excellent that you do not need to create your rules from scratch. Instead, you can start by combining some of the 25 base rules, which can protect passwords against dictionary and history-based attacks, for instance. Besides, it is very convenient that the tool can automatically communicate with users about the status of their passwords via email. Unluckily, you can feel the possibilities to export sets of rules are somewhat limited.
All in all, Password Policy Enforcer can effectively contribute to making your organization's network more robust against various types of threats, such as data theft. In this regard, the program allows using a much more granular password policy than it is possible with your system's built-in tool. This product is available under three different types of licenses: Standard, Premium and Subscription. Regrettably, it is not exactly what I would call affordable.
v9.1 [Jul 29, 2018]
Password Policy Server
The History rule can use a more secure hash function called Argon2. Argon2 won the Password Hashing Competition.
Can log an event when passwords are rejected.
Can enforce domain password policies on pure IPv6 networks.
Password Policy Client
Works over Microsoft DirectAccess connections.
Can query domain controllers on pure IPv6 networks.
Improved compatibility with third-party credential providers.
Management Console
Increased maximum age to five years.
Mall Creeps
