This setting prevents users from reusing passwords for a set number of password resets. This setting has real value only when a minimum password age is defined. Without a minimum password age, users can quickly cycle through temporary passwords before reusing an old password. This prevents users from quickly reusing old passwords after their passwords expire. This prevents unauthorized users from using stolen passwords indefinitely and also thwarts some brute force attacks.
