This policy controls whether planned password expiration longer than password age dictated by "Password Settings" policy is allowed or not.
If you enable this policy and such expiration is detected, password is changed immediately and password expiration is set according to policy.
If you disable or not configure this policy, password expiration time may be longer than required by "Password Settings" policy.
Registry Hive | HKEY_LOCAL_MACHINE |
Registry Path | Software\Policies\Microsoft Services\AdmPwd |
Value Name | PwdExpirationProtectionEnabled |
Value Type | REG_DWORD |
Enabled Value | 1 |
Disabled Value | 0 |