In most cases, you set this configuration parameter using group policy. You can, however, set it manually in the configuration file if you are not using group policy or want to temporarily override group policy.
The parameter value must be an ASCII string. UNIX special characters and environment variables are allowed. For example:
pam.password.new.mesg: Enter new Active Directory password:\
If this parameter is not present, its default value is “Enter new password:”.