Summary: How to set a password policy using a gpo.
Date: Around 2008
Refactor: 31 December 2024: Checked links and formatting.
On Domain Controllers with administrative tools installed:
Edit the 'Password Policy' and the 'Account Lockout Policy' to your needs.
Something like this should keep most environments pretty safe: