Policy

Set the DPAPI backup keys rotation period

This policy setting specifies the DPAPI backup keys rotation period. You can use this setting to override the default value of 90 days. Set 0 to disable the DPAPI backup keys rotation. If you enable this policy setting, set the number of days that the system waits before generating a new DPAPI backup key. If you disable or do not configure this policy setting, the default value of 90 days is used.

Policy

Pack Microsoft Windows

Category System / DPAPI

Policy ID 1ac8c0cec32b

Internal name DomainBackupKeyRotationPeriod

Registry

Copy registry mappings

HKLM\Software\Policies\Microsoft\Windows\DPAPI\DomainBackupKeyRotationPeriod

Policy notes

This policy setting specifies the DPAPI backup keys rotation period. You can use this setting to override the default value of 90 days. Set 0 to disable the DPAPI backup keys rotation. If you enable this policy setting, set the number of days that the system waits before generating a new DPAPI backup key. If you disable or do not configure this policy setting, the default value of 90 days is used.