The policy for passwords can be defined by the Administrator in the user managing dialog:
FOR RESEARCH USE ONLY. NOT FOR USE IN CLINICAL DIAGNOSTIC PROCEDURES.