In a previous article, I already talked about the granular password policies of Windows Server 2008. At that time they were a bit difficult to create because you needed to do it the hard way with adsiedit or ldp. It has gotten a lot simpler now with the Quest PowerShell cmdlets for Active Directory. It is a collection of cmdlets for querying Active Directory and creating new objects such as users and groups. On top of that, there are cmdlets for creating password settings objects (PSOs) to implement the granular password policies.