Try the reports at GO SECTOOLS
On your last point, first, you have to allow lower case passwords. Read
the help (and the ramifications!) on system value QPWDLVL. Once you allow
lower case, then look at system value QPWDRULES, especially *MIXCASEn.
Rob Berendt