Attached is Microsoft's latest password guidance document.
With the application of the guidelines in this document, you should be able to get better overal security without compromising too much of the user-friendly experience.
