Managing Local Administrator Passwords with LAPS

Local Administrator Password Solution (LAPS) is Microsoft’s answer to a common management problem inside Windows Server domains, the never-expiring (and often forgotten) local administrator password.

There are innumerable methods out there for handling this problem, from third-party solutions that may come at a cost, to recording them in databases or worse, spreadsheets. Of course, there is also the set and forget option.

LAPS comes free from Microsoft. You can download it here. It utilises a Group Policy CSE and Active Directory and when implemented it can automatically detect and update an expired local administrators password. If you’re concerned about not knowing what the password is, have no fear. LAPS stores the password inside of Active Directory under the computer it belongs to. Continue reading “Managing Local Administrator Passwords with LAPS”