1. Enforce password history: This means that every time a password needs to be changed, a new password must be created. If the password needs to be changed to a new unique value, it will increase the risk of writing the password somewhere to avoid forgetting it.
2. Maximum password age: This policy determines the time period (in days) before the system requires users to change their passwords. If set to 0, the password will never expire. In addition, the minimum age of a password must be less than the maximum age of a password.