What's the difference between "Minimum password length" and "Password Settings: Password Length"in LAPS?

Hao Ting Huang (TW) 1 Reputation point
2022-09-28T08:08:29.717+00:00

Hi ALL,
I was setting Active Directory and had found out that some of the settings in
"Computer Configuration\Policies\Administrative Templates\LAPS" and
"Computer Configuration\Policies\Windows Settings\Security Settings\Account Policies\Password Policy" are quite familiar.

For example, if it is possible to set up password length policy in both LAPS and password policy?
What if the policies conflicted?

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,857 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,996 questions
{count} votes

3 answers

Sort by: Most helpful
  1. Wesley Li-MSFT 4,386 Reputation points Microsoft Vendor
    2022-09-29T03:50:35.173+00:00

    Hi,

    The LAPS password setting includes password complexity settings and password age settings.
    245877-laps%E5%AF%86%E7%A0%81%E7%AD%96%E7%95%A5.jpg

    And depends on the normal minimum password age in the default domain policy.
    245853-laps%E5%AF%86%E7%A0%81%E7%AD%96%E7%95%A52.jpg

    So far, no feedback has been received from customers that there are policy conflicts.

    About how to configure LAPS, I believe the following articles will help you:
    https://social.technet.microsoft.com/Forums/windowsserver/en-US/aa7916f3-d9ab-4917-86c9-a1b311ea8499/laps-minimum-password-age

    Best Regards,
    Wesley Li

    0 comments No comments

  2. Limitless Technology 44,011 Reputation points
    2022-09-29T07:57:00.027+00:00

    Hi HaoTingHuangTW-1468,

    If you have LAPS implemented on your domain, I recommend not also configuring Password policies through GPO. This guide will help you configure LAPS:

    https://techcommunity.microsoft.com/t5/itops-talk-blog/step-by-step-guide-how-to-configure-microsoft-local/ba-p/2806185

    --------------------------------------------------------------------------------------------------------------------------------------------

    --If the reply is helpful, please Upvote and Accept as answer--

    0 comments No comments

  3. Scott Dawson 156 Reputation points
    2022-09-29T10:07:27.887+00:00

    At a very high level ...

    "Computer Configuration\Policies\Administrative Templates\LAPS" - affects the local Administrator password on end points.

    "Computer Configuration\Policies\Windows Settings\Security Settings\Account Policies\Password Policy" - affects all accounts in the domain(not local accounts on endpoints).

    0 comments No comments