ADMX Viewer
Microsoft.Policies.LAPS• Machine

Do not allow password expiration time longer than required by policy

If this setting is enabled or not configured, planned password expiration longer than the password age dictated by the "Password Settings" policy is NOT allowed. When such expiration is detected, the password is changed immediately and password expiration is set according to policy. If this setting is disabled, password expiration time may be longer than required by "Password Settings" policy. See https://go.microsoft.com/fwlink/?linkid=2188435 for more information.

Policy Details

Policy Name
LAPS_DontAllowPwdExpirationBehindPolicy
Registry Key
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS
Value Name
PasswordExpirationProtectionEnabled
Supported On
At least Microsoft Windows 10 or later
Policy State Values
Enabled: 1
Disabled: 0
Available Languages
en-us