Configures password parameters Password complexity: which characters are used when generating a new password Default: Large letters + small letters + numbers + special characters Password length Minimum: 8 characters Maximum: 64 characters Default: 14 characters Password age in days Minimum: 1 day Maximum: 365 days Default: 30 days Counter Measure: Enable and configure this setting to ensure secure passwords. Potential Impact: Users must create and maintain secure passwords. Fix: (1) GPO: Computer Configuration\Administrative Templates\LAPS\Password Settings (2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft Services\AdmPwd!PasswordAgeDays (2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft Services\AdmPwd!PasswordComplexity (2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft Services\AdmPwd!PasswordLength