Passwords are changed once a month; it must contain non alpha numeric characters, must contain combination of uppercase and lowercase letters, cannot contain user name (samAccountName or displayName); Must have at least 10 characters