On Windows 2000 and Windows XP you cannot use the MUST_CHANGE option.

 The password complexity checking for Windows 2000 is very simple, you are not allowed to use the following password: null or empty, the computer name, the login name, 'password', 'admin', 'administrator', 'sa', or 'sysadmin'.

---

Cristian Andrei Lefter, SQL Server MVP
MCT, MCSA, MCDBA, MCAD, MCSD .NET,
MCTS, MCITP - Database Administrator SQL Server 2005
http://sqlserver.ro