Password requirements for users

Passwords assigned to new users must meet the following requirements:

Password must contain at least 8 characters.
Must not exceed 100 characters.
Must contain at least one number.
Must contain at least one special character (#?!@$%^&*-).
Must contain at least one upper case character.
Must contain at least one lower case character.
Passwords are case-sensitive.
Cannot contain the user name.
Cannot reuse any of your last 10 passwords.
Passwords must be changed every 90 days.

The Admin user or a user with the PasswordMaintenace role can reset password for users. When a password is reset, it reverts to the user name and will immediately require the user to change the password upon logging in.