As an admin, im amazed by the passwords I come across.
Heres a little tool and command to help.
-B Don't include ambiguous characters in the password
-n Include at least one number in the password
-y Include at least one special symbol in the password
-c Include at least one capital letter in the password
Add a number to set password length, add another to set how many password to output. Example:
pwgen -Bnyc 12 20
this will output 20 password of 12 chars length.