ADMX Viewer
Microsoft.Policies.LAPS• Machine

Configure size of encrypted password history

Use this setting to configure how many previous encrypted passwords will be stored in Active Directory. Configuring this setting has no effect unless 1) the password has been configured to be backed up to Active Directory and 2) password encryption has been enabled. If this setting is enabled, the specified number of older passwords will be stored in Active Directory. If this setting is disabled or not configured, zero older passwords will be stored in Active Directory. This setting has a minimum allowed value of 0 passwords. This setting has a maximum allowed value of 12 passwords. See https://go.microsoft.com/fwlink/?linkid=2188435 for more information.

Policy Details

Policy Name
LAPS_ADEncryptedPasswordHistorySize
Registry Key
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS
Supported On
At least Microsoft Windows 10 or later
Available Languages
en-us

Configuration Elements

Encrypted password history size

Type: decimal

Default: 0

Min: 0
Max: 12