Password is set on nt4. for user. User logs on and is prompted to change password user leaves password blank on initial and confirmation. Win2k accepts password.
how can you prevent users from using blank passwords?