Supplement 4 of the Server Resource Kit contains passprop.exe, a tool that helps you tighten security two ways:
PASSPROP \[/complex\] \[/simple\] \[/adminlockout\] \[/noadminlockout\] /complex Force passwords to be complex, requiring passwords to be a mix of upper and lowercase letters and numbers or symbols. /simple Allow passwords to be simple. /adminlockout Allow the Administrator account to be locked out. Once the account is locked out, as in response to an attempted break-in, it can still log on interactively on domain controllers. /noadminlockout Don't allow the administrator account to be locked out.If you type passprop without any parameter, it displays the current state of these settings.