Not contain the user's account name or parts of the user's full name that exceed two consecutive characters\nBe at least six characters in length\nContain characters from three of the following four categories:\nEnglish uppercase characters (A through Z)\nEnglish lowercase characters (a through z)\nBase 10 digits (0 through 9)\nNon-alphabetic characters (for example, !, $, #, %)\nComplexity requirements are enforced when passwords are changed or created.