Configure password protection warning trigger

Allows you to control when to trigger password protection warning. Password protection alerts users when they reuse their protected password on potentially suspicious sites.

You can use the 'PasswordProtectionLoginURLs' (Configure the list of enterprise login URLs where the password protection service should capture salted hashes of a password) and 'PasswordProtectionChangePasswordURL' (Configure the change password URL) policies to configure which passwords to protect.

Exemptions: Passwords for the sites listed in 'PasswordProtectionLoginURLs' and 'PasswordProtectionChangePasswordURL', and for the sites listed in 'SmartScreenAllowListDomains' (Configure the list of domains for which Microsoft Defender SmartScreen won't trigger warnings), don't trigger a password-protection warning.

Set to PasswordProtectionWarningOff to not show password protection warnings.

Set to PasswordProtectionWarningOnPasswordReuse to show password protection warnings when the users reuse their protected password on a non-allowlisted site.

If you disable or don't configure this policy, then the warning trigger isn't shown.

Policy options mapping:

* PasswordProtectionWarningOff (0) = Password protection warning is off

* PasswordProtectionWarningOnPasswordReuse (1) = Password protection warning is triggered by password reuse

Use the preceding information when configuring this policy.