Policy

Configure size of encrypted password history

Use this setting to configure how many previous encrypted passwords will be stored in Active Directory. Configuring this setting has no effect unless 1) the password has been configured to be backed up to Active Directory and 2) password encryption has been enabled. If this setting is enabled, the specified number of older passwords will be stored in Active Directory. If this setting is disabled or not configured, zero older passwords will be stored in Active Directory. This setting has a minimum allowed value of 0 passwords. This setting has a maximum allowed value of 12 passwords. See https://go.microsoft.com/fwlink/?linkid=2188435 for more information.

Policy
Pack Microsoft Windows
Category System / LAPS
Policy ID d4e9388b5417
Internal name LAPS_ADEncryptedPasswordHistorySize

Registry

Copy registry mappings

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS\ADEncryptedPasswordHistorySize

Policy notes

Use this setting to configure how many previous encrypted passwords will be stored in Active Directory. Configuring this setting has no effect unless 1) the password has been configured to be backed up to Active Directory and 2) password encryption has been enabled. If this setting is enabled, the specified number of older passwords will be stored in Active Directory. If this setting is disabled or not configured, zero older passwords will be stored in Active Directory. This setting has a minimum allowed value of 0 passwords. This setting has a maximum allowed value of 12 passwords. See https://go.microsoft.com/fwlink/?linkid=2188435 for more information.

Related policies

Configure authorized password decryptorsConfigure automatic account managementConfigure password backup directoryDo not allow password expiration time longer than required by policyEnable password backup for DSRM accountsEnable password encryptionName of administrator account to manage