policyCategoryAuthentication policyContent policyAttributeLastAuthenticationTime > policyAttributeCurrentTime - (policyAttributeInactiveDays * 24 * 60 * 60) policyIdentifier Inactive Account policyParameters policyAttributeInactiveDays 35 policyCategoryPasswordContent policyContent policyAttributePassword matches '(.*[A-Z].*){1,}+' policyIdentifier Must have at least 1 uppercase letter policyParameters minimumAlphaCharactersUpperCase 1 policyContent policyAttributePassword matches '(.*[a-z].*){1,}+' policyIdentifier Must have at least 1 lowercase letter policyParameters minimumAlphaCharactersLowerCase 1 policyContent policyAttributeLastPasswordChangeTime < policyAttributeCurrentTime - (policyAttributeMinimumLifetimeHours * 60 * 60) policyIdentifier Minimum Password Lifetime policyParameters policyAttributeMinimumLifetimeHours 24