What's the difference between "Minimum password length" and "Password Settings: Password Length"in LAPS?

Question

Hi ALL,
I was setting Active Directory and had found out that some of the settings in
"Computer Configuration\Policies\Administrative Templates\LAPS" and
"Computer Configuration\Policies\Windows Settings\Security Settings\Account Policies\Password Policy" are quite familiar.

For example, if it is possible to set up password length policy in both LAPS and password policy?
What if the policies conflicted?

Answer 1

Hi,

The LAPS password setting includes password complexity settings and password age settings.

And depends on the normal minimum password age in the default domain policy.

So far, no feedback has been received from customers that there are policy conflicts.

About how to configure LAPS, I believe the following articles will help you:
https://social.technet.microsoft.com/Forums/windowsserver/en-US/aa7916f3-d9ab-4917-86c9-a1b311ea8499/laps-minimum-password-age

Best Regards,
Wesley Li

Answer 2

Hi HaoTingHuangTW-1468,

If you have LAPS implemented on your domain, I recommend not also configuring Password policies through GPO. This guide will help you configure LAPS:

https://techcommunity.microsoft.com/t5/itops-talk-blog/step-by-step-guide-how-to-configure-microsoft-local/ba-p/2806185

--------------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept as answer--

Answer 3

At a very high level ...

"Computer Configuration\Policies\Administrative Templates\LAPS" - affects the local Administrator password on end points.

"Computer Configuration\Policies\Windows Settings\Security Settings\Account Policies\Password Policy" - affects all accounts in the domain(not local accounts on endpoints).