"Recent scientific research calls into question the value of many long-standing password-security practices, such as password expiration policies, and points in

"Recent scientific research calls into question the value of many long-standing password-security practices, such as password expiration policies, and points instead to better alternatives such as enforcing banned-password lists (a great example being Azure AD password protection) and multi-factor authentication." MS acknowledges and supports this, yet ad still doesn't support banned lists without serious modification and customization to ad. which no sane ad admin will allow. I think ms is finally starting to abandon on prem ad, in favor of the less capable, and less tested azure ad. it is a shame that a staple of enterprise it is slowly dieing out without a real replacement.