Tip to Implement Best Password policy For Windows Authentication
By default Windows accepts both short and long passwords as the Windows login password.
Some users use extremely short passwords, which can easily be brute forced. Read More http://www.tipstechtricks.com/2010/09/tip-to-implement-best-password-policy.html