Up to 1,000 words specific to an organisation, such as product names or locations, that Microsoft Entra Password Protection refuses in passwords, on top of Microsoft's global list. On-premises AD DS can enforce it too.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Custom banned password list in context, with comparison tables and the common traps.
Terms in this definition
- Microsoft Entra Password Protection
Stops people picking easily guessed passwords, close variations of them and words linked to your own organisation, checking against Microsoft's global banned list and any custom list you add. Agents can extend it to on-premises Active Directory.
- AGDLP
Nesting pattern: users go into global groups, which go into domain local groups, which receive the permissions. AGUDLP adds universal groups for forests with several domains.
- List
Permission on Key Vault secrets allowing a caller to enumerate those in a vault, though their values are not returned.
- AD DS
Short for Active Directory Domain Services, the domain controller-based Windows directory run on-premises. Microsoft Entra Domain Services offers a managed counterpart.