Default policy in 2003 requires that a password:
Has at least 6 characters
Does not contain "Administrator" or "Admin"
Contains characters from three of the following categories:
-Uppercase letters (A, B, C, and so on)
-Lowercase letters (a, b, c, and so on)
-Numbers (0, 1, 2, and so on)
-Non-alphanumeric characters (#, &, ~, and so on)
You will have to change your Default Domain policy to change the restrictions.
PSC
Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers