where do you change the length of the passwords that the user uses

Refer to this Microsoft article named "Apply or modify password policy". You can implement your policy as a group policy linked to your domain. If you want to implement multiple password policies, refer to this Microsoft article named "AD DS: Fine-Gained Password Policies" to perform that. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

The domain password policy needs to modified in a GPO (Default Domain POlicy or custom policy that you create with a higher precedence). You can find the settings in the Computer Configuration/Security Settings/Account Policies/Password Policy. You also have the option for Fine Grained Password Policies if you are running AD 2008 or 2008 R2. The links that Mr X provided contains the details. Visit: anITKB.com, an IT Knowledge Base.