A company's security policy states that users must not reuse any of their last 12 passwords when changing credentials. Several employees have been observed cycling back to a familiar password after a single reset. Which Windows security setting should a technician configure to enforce this requirement?