The password filter does a simple check: Does the new password contain an entry in the list of forbidden words?
In practice, the list is a series of forbidden words and known passwords.
I think it stands to reason that the list should be public. We don't want people using these words in their passwords, so rather than have them struggle, they can at least have the option of not having to guess what's allowed and what's not.
I'm asking this question here because I feel like this concept might be met with responses that are different from my own. e.g. "Don't give out the secret list!"
And, anyway, the list is in the NETLOGON share so anyone can read it if they know where to look. My point is about whether to make the availability obvious or not.