https://redbeardsec.com/active-directory-passwords-best-practices-how-to-reduce-risk/