Password policies are optional. A Detect user who has permission to modify password policies uses the Configuration Utility to turn the enforcement of password policies on or off and set the policy values. By default, the pre-defined system account has this access.