IIRC gibt es keine Regeln, die ein Admin setzten kann. Der Admin kann nur die erforderliche "Password-Strength" setzen.
A password's strength is based on several factors. A password starts out with a rating equal to the length of the password. It receives a 25 percent bonus if it contains one of the following, and a 50 percent bonus if it contains two or more:
* Mixed case
* Numbers
* Punctuation
Digits in the last position and uppercase letters in the first position do not qualify as bonus characters because these are commonly used modifications to passwords to evade password-checking mechanisms.
In addition, the rating decreases if the password contains anything that can be programmatically determined to be predictable, for example, words in a dictionary or repeating characters.
Understanding password quality