This is probably one of the silly password policies being enforced 'Password cannot contain more than 2 characters from the user name.'
Really stinks.
Security is important, but in today's world, it has to go hand in hand with ease of use.
This policy make sure that the passwords are not easy to change and if one manages to change it, it is difficult to remember.
Am I the only one? or have you experienced the pain too?
Ady