Cisco ASA Series Cli Configuration Manual page 1666

Configuring Connection Profiles
Figure 1-4
The user should be able to log on successfully, even though a AAA server provides an account-disabled
indicator.
Using Active Directory to Enforce Minimum Password Length
To enforce a minimum length for passwords, specify the password-management command in
tunnel-group general-attributes configuration mode on the ASA and perform the following steps under
Active Directory:
Step 1
Select Start > Programs > Administrative Tools > Domain Security Policy.
Step 2
Select Windows Settings > Security Settings > Account Policies > Password Policy.
Step 3
Double-click Minimum Password Length. The Security Policy Setting dialog box appears.
Step 4
Check the Define this policy setting check box and specify the minimum number of characters that the
password must contain.
Cisco ASA Series CLI Configuration Guide
1-32
Chapter 1
Active Directory—Override Account Disabled
Configuring Connection Profiles, Group Policies, and Users