What's the difference between "Minimum password length" and "Password Settings: Password Length"in LAPS?

Hao Ting Huang (TW) 1 Reputation point

I was setting Active Directory and had found out that some of the settings in
"Computer Configuration\Policies\Administrative Templates\LAPS" and
"Computer Configuration\Policies\Windows Settings\Security Settings\Account Policies\Password Policy" are quite familiar.

For example, if it is possible to set up password length policy in both LAPS and password policy?
What if the policies conflicted?

A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,857 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,996 questions
{count} votes

3 answers

Sort by: Most helpful
  1. Wesley Li-MSFT 4,386 Reputation points Microsoft Vendor


    The LAPS password setting includes password complexity settings and password age settings.

    And depends on the normal minimum password age in the default domain policy.

    So far, no feedback has been received from customers that there are policy conflicts.

    About how to configure LAPS, I believe the following articles will help you:

    Best Regards,
    Wesley Li

    0 comments No comments

  2. Limitless Technology 44,011 Reputation points

    Hi HaoTingHuangTW-1468,

    If you have LAPS implemented on your domain, I recommend not also configuring Password policies through GPO. This guide will help you configure LAPS:



    --If the reply is helpful, please Upvote and Accept as answer--

    0 comments No comments

  3. Scott Dawson 156 Reputation points

    At a very high level ...

    "Computer Configuration\Policies\Administrative Templates\LAPS" - affects the local Administrator password on end points.

    "Computer Configuration\Policies\Windows Settings\Security Settings\Account Policies\Password Policy" - affects all accounts in the domain(not local accounts on endpoints).

    0 comments No comments