How can a Password Filter DLL be applied on non-Windows Server systems that have password complexity disabled?

On non-server systems, password complexity is disabled by default. To use a Password Filter DLL, an attacker must first enable the policy by exporting the current security database with `secedit /export /cfg gp.inf`, set `PasswordComplexity=1`, then import it with `secedit /configure` and refresh Group Policy with `gpupdate /force`. After that, the standard installation steps (registry, DLL placement, reboot) apply, allowing password capture on workstations.