ADMX Viewer
Microsoft.Policies.LAPS• Machine

Password Settings

Configures password parameters Password complexity: which characters are used when generating a new password Default: Large letters + small letters + numbers + special characters Password length Minimum: 8 characters Maximum: 64 characters Default: 14 characters Password age in days Minimum: 1 day (7 days when backup directory is configured to be Azure AD) Maximum: 365 days Default: 30 days Passphrase length Minimum: 3 words Maximum: 10 words Default: 6 words See https://go.microsoft.com/fwlink/?linkid=2188435 for more information. Passphrase list taken from "Deep Dive: EFF's New Wordlists for Random Passphrases" by Electronic Frontier Foundation, and is used under a CC-BY-3.0 Attribution license. See https://go.microsoft.com/fwlink/?linkid=2255471 for more information.

Policy Details

Policy Name
LAPS_PasswordSettings
Registry Key
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS
Supported On
At least Microsoft Windows 10 or later
Available Languages
en-us

Configuration Elements

Password Complexity

Type: enum

Allowed Values
  • 1 Large letters
  • 2 Large letters + small letters
  • 3 Large letters + small letters + numbers
  • 4 Large letters + small letters + numbers + specials
  • 5 Large letters + small letters + numbers + specials (improved readability)
  • 6 Passphrase (long words)
  • 7 Passphrase (short words)
  • 8 Passphrase (short words with unique prefixes)

Password Length

Type: decimal

Default: 14

Min: 8
Max: 64

Password Age (Days)

Type: decimal

Default: 30

Min: 1
Max: 365

Passphrase Length (words)

Type: decimal

Default: 6

Min: 3
Max: 10