By default, user’s last 6 passwords are remembered, maximum is 24.
The Enforce password history policy setting determines the number of unique new passwords that must be associated with a user account before an old password can be reused.
The possible values for this Group Policy setting are:
- A user-defined number from 0 through 24.
- Not defined.