title: Check new password against Active Directory history (and maybe it's complexity policy)?
body: <p>I have application which allows users to change their passwords. Those users are stored in Active Directory. On password change I need to apply password policies. Complexity policies are easy. But what if password has to differ to last 20 passwords for this user? Is anyhow possible to use AD user's password history for this? </p>
  
  <p>I know AD stores list of last about 20 passwords' hashes for each user. Afaik it is not possible to retrieve that list. But is anyhow possible to ask AD if password is contained by that list? Or is possible to ask AD, if password is valid new password for particular user according to policies defined by AD configuration?</p>