Do not allow password expiration time longer than required by policy

Policy ID
LAPS_DontAllowPwdExpirationBehindPolicy
Scope
Computer Configuration
Supported on
At least Microsoft Windows 10 or later
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
System › LAPS

Description

If this setting is enabled or not configured, planned password expiration longer than the password age dictated by the "Password Settings" policy is NOT allowed. When such expiration is detected, the password is changed immediately and password expiration is set according to policy.

If this setting is disabled, password expiration time may be longer than required by "Password Settings" policy.

See https://go.microsoft.com/fwlink/?linkid=2188435 for more information.

Registry

ComputerHKEY_LOCAL_MACHINE
  • PasswordExpirationProtectionEnabledREG_DWORD

Other policies in the same category

View all policies in this category (10)