When you enable this setting, planned password expiration longer than password age dictated by "Password Settings" policy is NOT allowed. When such expiration is detected, password is changed immediately and password expiration is set according to policy.
When you disable or not configure this setting, password expiration time may be longer than required by "Password Settings" policy.
Registry Hive | HKEY_LOCAL_MACHINE |
Registry Path | Software\Policies\Microsoft Services\AdmPwd |
Value Name | PwdExpirationProtectionEnabled |
Value Type | REG_DWORD |
Enabled Value | 1 |
Disabled Value | 0 |