I recently strengthend the password policy at work. Only I did not do the legwork of educating users prior. Big mistake. Even my sophisticated users were using shitty passwords. I've spent probably 3 hours the last two days helping various individuals with their passwords. I must write up something over lunch for the internal website. Nobody will read it, but I can at least point people there when they call me.

I need a peer. I have them in title, but not in experience. Nobody here will be calling me a dumbass for making this error. Except me.

I did notice our good friend and frequent reader, Paul Robichaux, wrote a nice series of articles a few years ago for Technet about Security. 10 articles in all. I've only read two (so far), but they seem like a very good place to start for thinking about Windows Security.