Creating a Password Policy in AD

On Domain Controllers with administrative tools installed:

• Go to start → All Programs → Administrative Tools → Group Policy Management
• Browse to the Forest → Domain → Organizational Unit where you want to apply the policy
• Rightclick → 'Create a GPO in this domain, and link it here':

• Browse to Computer Configuration → Policies → Windows Settings → Security Settings:

Edit the 'Password Policy' and the 'Account Lockout Policy' to your needs.

Something like this should keep most environments pretty safe: