Supplement 4 of the Server Resource Kit contains passprop.exe, a tool that helps you tighten security two ways:

PASSPROP \[/complex\] \[/simple\] \[/adminlockout\] \[/noadminlockout\]                                  /complex            Force passwords to be complex, requiring passwords                                                      to be a mix of upper and lowercase letters and                                                      numbers or symbols.                                  /simple             Allow passwords to be simple.                                  /adminlockout       Allow the Administrator account to be locked out.                                                      Once the account is locked out, as in response to an attempted break-in,                                                      it can still log on interactively on domain controllers.                                   /noadminlockout     Don't allow the administrator account to be locked out.
If you type passprop without any parameter, it displays the current state of these settings.