http://blogs.technet.com/aralves/archive/2007/05/24/windows-server-2008-password-policies-changes.aspx
What took you so long?