Active Directory password complexity based onto entropy

Question

I am evaluating the possibility to enable password complexity rules into my Active Directory, but the rules it offers are for me not good. So I would like to have a complexity rule based onto only two factors:

1. password length: at least 12/14/16 chars
2. a good entropy

Is it possibile to improve AD with this kind of rule?

Answer 1

Yes. You would need to create a custom Password Filter, but it's not a point and click function. See this Microsoft article on how to do so: Custom Password Filter

There are also a number of third party password filters available that may make it easier for you (e.g. NFront, SpecOps, etc.)