How come if we have a domain password policy that says:
Minimum length - 10
Complexity - Yes
Expires - 90 days
Lockout - 5 failed attempts
Can the LOCAL administrator password on an XP device (joined to the domain) have a password of 6 characters, no complexity, never gets prompted to reset password as its expired, and is never locked out even if you do about 40 purposelly wrong password
combinations.