Forcing strong passwords

[Guest]

@Michael: In environments like this, IT Security people don't give a stuff whether users remember passwords or not, they would far rather people had to ask for resets than risk having passwords that are easy to guess and break.

Generally in these environments, the employees also find their own ways around the problem of "secure" passwords and frequent changes. Where I work, they enforce a one capital, one number, one symbol rule on passwords, so the vast majority of people just use the same password and increment the number every 30 days when the change-force happens. For example: Banana1!, Banana2!, Banana3!, etc.

You can't tell me that is any more secure than just having my own password that is completely random, but doesn't change...