GPO tool

Group Policy made searchable

A free ADMX browser or comparison tool for IT administrators. Search policies, find registry keys, and see exactly what each setting writes to the Windows Registry. Or compare two GPO backups to see exactly what has changed between them.

Select a product
  • Select a category.

Configure size of encrypted password history

Use this setting to configure how many previous encrypted passwords will be stored in Active Directory.

Configuring this setting has no effect unless 1) the password has been configured to be backed up to Active Directory and 2) password encryption has been enabled.

If this setting is enabled, the specified number of older passwords will be stored in Active Directory.

If this setting is disabled or not configured, zero older passwords will be stored in Active Directory.

This setting has a minimum allowed value of 0 passwords.

This setting has a maximum allowed value of 12 passwords.

See https://go.microsoft.com/fwlink/?linkid=2188435 for more information.

Registry Information

VendorMicrosoft
ProductLAPS
CategoryLAPS
Applies toComputer Configuration
Supported onAt least Microsoft Windows 10 or later
Registry Key[HKLM]SOFTWAREMicrosoftWindowsCurrentVersionPoliciesLAPS

Policy Settings

Encrypted password history size

Registry Key[HKLM]SOFTWAREMicrosoftWindowsCurrentVersionPoliciesLAPS
Value NameADEncryptedPasswordHistorySize
TypeREG_DWORD
Min value0
Max value12
Default0