Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Been searching all night for this... does anyone know the registry key for Windows XP/2003 to enforce password history?

share|improve this question

migrated from Oct 1 '12 at 2:28

This question came from our site for professional and enthusiast programmers.

What do you mean by "password history" exactly? – Mehrdad Oct 1 '12 at 2:22
Determines the number of unique new passwords that have to be associated with a user account before an old password can be reused.… – Fran Fitzpatrick Oct 1 '12 at 2:23
There is no "password history" registry key. If there was, it would be a major security hole. @Fran: That's password policy, not password history. – Ken White Oct 1 '12 at 2:24
How would it be a major security hole? Every other password policy option is linked to a registry key. – Fran Fitzpatrick Oct 1 '12 at 2:25
It is a password policy to enforce password history. Ah, lets just chalk it up to semantics. :-) Anyone know? – Fran Fitzpatrick Oct 1 '12 at 2:26

Value to check: RefusePasswordChange and MaximumPasswordAge

[Source: MS Technet Librairy]

share|improve this answer

I don't know about Windows XP/2003, but on Windows 7 Ultimate x64 it's apparently

Key:         HKLM\SAM\SAM\Domains\Account
Value:       F
Byte offset: 0x10   (0x3A corresponds to 0, 0x3B corresponds to 1)

It's in binary, maintained by LSASS, so I don't recommend you try to change it through undocumented means.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .