Specifies the rate (in days) at which a client changes their machine account password. The password is randomly generated by the client and not visible to the user.
Just like user passwords, machine passwords should be changed regularly. Disabling this policy or setting a high number of days can have a negative impact on security since it gives potential attackers more time to find the machine account password and use it.
If the policy is unset, the machine account password is changed every 30 days.
If the policy is set to 0, machine account password change is disabled.
Note that passwords might get older than the specified number of days if the client has been offline for a longer period of time.