Password Security - Part 3

You are the server administrator. You are updating the password policy on the server for your company.

You are concerned about two issues:

1) Someone stealing the password file and cracking passwords after it is obtained.

2) Someone trying to directly login to the server pretending to be a user.

Identify FOUR or more rules/policies/settings you would configure on the server that would make the above two issues more difficult for an attacker to take advantage of.