I'm currently working on setting up and enforcing a stricter password policy for the company I'm working for. Up to this point they did not have one. At all... The problem is, I don't know anything ...

You know I'm in the "dedicate DCs as DCs only" camp, so I would prefer to consider a virtual SQL Express server running under the DC as the host. With Windows licenses now allowing you to run 1 or ...