Policy

Password Settings

Microsoft Windows

Back to LAPSBack to main
Password Settings
Jump to overview

Policy overview

Key metadata and intent for this policy.

Computer
Category
System > LAPS
Supported on
At least Microsoft Windows 10 or later

Supported OS tags: Windows10

Configures password parameters Password complexity: which characters are used when generating a new password Default: Large letters + small letters + numbers + special characters Password length Minimum: 8 characters Maximum: 64 characters Default: 14 characters Password age in days Minimum: 1 day (7 days when backup directory is configured to be Azure AD) Maximum: 365 days Default: 30 days Passphrase length Minimum: 3 words Maximum: 10 words Default: 6 words See https://go.microsoft.com/fwlink/?linkid=2188435 for more information. Passphrase list taken from "Deep Dive: EFF's New Wordlists for Random Passphrases" by Electronic Frontier Foundation, and is used under a CC-BY-3.0 Attribution license. See https://go.microsoft.com/fwlink/?linkid=2255471 for more information.

Internal name
LAPS_PasswordSettings
Policy ID
e7494e499a73
Elements
4

Registry values

How enabled and disabled states update the registry.

No explicit registry values are set for enabled or disabled states.

Policy elements

Inputs and configuration options exposed by this policy.

ScopeElementTypeRegistry mappingConstraints & behaviorCopy
Computer
Password Length
ID LAPS_PasswordLength
decimal
Path
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS
Value name
PasswordLength
Type
REG_DWORD
Range: 8 to 64
Computer
Password Age (Days)
ID LAPS_PasswordAgeDays
decimal
Path
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS
Value name
PasswordAgeDays
Type
REG_DWORD
Range: 1 to 365
Computer
Passphrase Length (words)
ID LAPS_PassphraseLength
decimal
Path
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS
Value name
PassphraseLength
Type
REG_DWORD
Range: 3 to 10
Computer
Password Complexity
ID LAPS_PasswordComplexity
enum
Path
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS
Value name
PasswordComplexity
Type
REG_DWORD
Options: Large letters (1), Large letters + small letters (2), Large letters + small letters + numbers (3), Large letters + small letters + numbers + specials (4), Large letters + small letters + numbers + specials (improved readability) (5), Passphrase (long words) (6), Passphrase (short words) (7), Passphrase (short words with unique prefixes) (8)
Password Length
Computer · Type decimal
Registry mapping
Path
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS
Value name
PasswordLength
Type
REG_DWORD
Details
Range: 8 to 64
Password Age (Days)
Computer · Type decimal
Registry mapping
Path
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS
Value name
PasswordAgeDays
Type
REG_DWORD
Details
Range: 1 to 365
Passphrase Length (words)
Computer · Type decimal
Registry mapping
Path
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS
Value name
PassphraseLength
Type
REG_DWORD
Details
Range: 3 to 10
Password Complexity
Computer · Type enum
Registry mapping
Path
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS
Value name
PasswordComplexity
Type
REG_DWORD
Details
Options: Large letters (1), Large letters + small letters (2), Large letters + small letters + numbers (3), Large letters + small letters + numbers + specials (4), Large letters + small letters + numbers + specials (improved readability) (5), Passphrase (long words) (6), Passphrase (short words) (7), Passphrase (short words with unique prefixes) (8)