Set the DPAPI backup keys rotation period

Supported on: At least Windows Server 2016

Registry

HKLM Software\Policies\Microsoft\Windows\DPAPI

Options

DomainBackupKeyRotationPeriod decimal - range 0-18262

Description

This policy setting specifies the DPAPI backup keys rotation period. You can use this setting to override the default value of 90 days. Set 0 to disable the DPAPI backup keys rotation. If you enable this policy setting, set the number of days that the system waits before generating a new DPAPI backup key. If you disable or do not configure this policy setting, the default value of 90 days is used.