Preventing Users from Using Breached Passwords in Active Directory

Posted by Minega15@reddit | sysadmin | View on Reddit | 43 comments

Hi everyone,

At work, I'm trying to find a way to prevent users from setting passwords that have been previously breached. One approach I'm considering is configuring the Active Directory controller to reference a file containing a list of known compromised passwords, which could be updated over time.

Is this possible? If so, what would be the best way to implement it? Or is there a more effective solution that you’d recommend?

Thanks in advance for any insights!