It might also complain that you haven't used a 'Strong Password' (especially if you have applied SP3a - as ACW suggests). Quite how it decides what a strong password is I don't know, but using a suitable mix of caps, lower case, numbers and punctuation with a total length > 10 chars seemed to do it for me 
|