I have bad experience with password quality rules.  At UT, they have a set of very, very restrictive rules (like, they will de-l3e7ify text and look up n-grams in a dictionary) and it actually results in people using things like patterns based on physical location of the keys on the keyboard in order to generate a password that both passes the algorithm and is memorable.

While it would be awesome if everyone used LastPass or something similar, not everyone will.  So, we have to make sure that whatever we do for this, we don't make it overly restrictive to the point that people cannot actually generate "secure", meaningful passwords that they can actually remember.