Passwords minimum length

What do you manipulate to require users to use passwords of a minimum length, and to change them periodically?

Password policy (part of Local Security Policy)