In AD DS, each ___domain NC contains a well-known Password Settings container. This container is initially empty, but is designed to contain objects of class msDS-PasswordSettings. These objects represent password settings for a group of users in the ___domain. For more information, see [MS-SAMR] section 3.1.1.5.
name: Password Settings container
parent: System container
objectClass: msDS-PasswordSettings
systemFlags: {FLAG_DISALLOW_DELETE | FLAG_DOMAIN_DISALLOW_RENAME | FLAG_DOMAIN_DISALLOW_MOVE}