In most cases, you set this configuration parameter using group policy. You can, however, set it manually in the configuration file if you are not using group policy or want to temporarily override group policy.
The parameter value must be an ASCII string. UNIX special characters and environment variables are allowed. For example:
pam.password.confirm.mesg: Confirm new Active Directory password:\
If this parameter is not present, its default value is “Confirm new password:”.