Default Values of AD Password Policy.

Computer Configuration\Windows Settings\Security Settings\Account Policies\Password Policy

Topic	Description
Enforce password history	Describes the best practices, location, values, policy management, and security considerations for the Enforce password history security policy setting.
Maximum password age	Describes the best practices, location, values, policy management, and security considerations for the Maximum password age security policy setting.
Minimum password age	Describes the best practices, location, values, policy management, and security considerations for the Minimum password age security policy setting.
Minimum password length	Describes the best practices, location, values, policy management, and security considerations for the Minimum password length security policy setting.
Password must meet complexity requirements	Describes the best practices, location, values, and security considerations for the Password must meet complexity requirements security policy setting.
Store passwords using reversible encryption	Describes the best practices, location, values, and security considerations for the Store passwords using reversible encryption security policy setting.

Default values

The following table lists the actual and effective default policy values. Default values are also listed on the policy’s property page.Expand table

Server type or GPO	Default value
Default domain policy	24 passwords remembered
Default domain controller policy	Not defined
Stand-alone server default settings	0 passwords remembered
Domain controller effective default settings	24 passwords remembered
Member server effective default settings	24 passwords remembered
Effective GPO default settings on client computers	24 passwords remembered

Server type or Group Policy Object (GPO)	Default value
Default domain policy	42 days
Default domain controller policy	Not defined
Stand-alone server default settings	42 days
Domain controller effective default settings	42 days
Member server effective default settings	42 days
Effective GPO default settings on client computers	42 days

Server type or Group Policy Object (GPO)	Default value
Default domain policy	1 day
Default domain controller policy	Not defined
Stand-alone server default settings	0 days
Domain controller effective default settings	1 day
Member server effective default settings	1 day
Effective GPO default settings on client computers	1 day

Server type or Group Policy Object (GPO)	Default value
Default domain policy	Seven characters
Default domain controller policy	Not defined
Stand-alone server default settings	Zero characters
Domain controller effective default settings	Seven characters
Member server effective default settings	Seven characters
Effective GPO default settings on client computers	Zero characters

Server type or Group Policy Object (GPO)	Default value
Default domain policy	Enabled
Default domain controller policy	Enabled
Stand-alone server default settings	Disabled
Domain controller effective default settings	Enabled
Member server effective default settings	Enabled
Effective GPO default settings on client computers	Disabled

Server type or Group Policy Object (GPO)	Default value
Default domain policy	Disabled
Default domain controller policy	Disabled
Stand-alone server default settings	Disabled
Domain controller effective default settings	Disabled
Member server effective default settings	Disabled
Effective GPO default settings on client computers	Disabled