Configure size of encrypted password history

Policy ID
LAPS_ADEncryptedPasswordHistorySize
Scope
Computer Configuration
Supported on
At least Microsoft Windows 10 or later
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
System › LAPS

Description

Use this setting to configure how many previous encrypted passwords will be stored in Active Directory.

Configuring this setting has no effect unless 1) the password has been configured to be backed up to Active Directory and 2) password encryption has been enabled.

If this setting is enabled, the specified number of older passwords will be stored in Active Directory.

If this setting is disabled or not configured, zero older passwords will be stored in Active Directory.

This setting has a minimum allowed value of 0 passwords.

This setting has a maximum allowed value of 12 passwords.

See https://go.microsoft.com/fwlink/?linkid=2188435 for more information.

Options

  • Encrypted password history size

Registry

ComputerHKEY_LOCAL_MACHINE
  • ADEncryptedPasswordHistorySizeREG_DWORD

Other policies in the same category

View all policies in this category (10)