Local Administrator Password Solution (LAPS)

The " Local Administrator Password Solution " (LAPS) provides management of local account passwords of domain joined computers. Passwords are stored in Active Directory (AD) and protected by ACL, so only eligible users can read it or request its reset.

Get an overview of Windows Local Administrator Password Solution (Windows LAPS), including key scenarios and setup and management options.
Microsoft LAPS Install and Setup Guide

Microsoft Local Administrator Password Solution (LAPS) is a free tool that randomizes the local administrator password on domain-joined computers. It is the best way to ensure the local admin account has a unique password and is changed on a regular basis.
Local Administrator Password Solution or LAPS will automatically manage local administrator account passwords on domain-joined Windows computers.

How to Use LAPS the Local Administrator Password Solution
Microsoft's Local Administrator Password Solution (LAPS) is a legacy Windows tool that IT admins can use to manage account passwords of domain-joined computers. The company has finally updated ...
Microsoft Local Administrator Password Solution (LAPS) is a powerful tool designed to enhance the security of local administrator accounts on domain-joined computers. By randomizing and regularly changing the local administrator password , LAPS helps mitigate the...

Overview of Local Administrator Password Solution From Microsoft
Updated - 25/10/2023 - Windows Local Administrator Password Solution with Microsoft Entra ID is now Generally Available! Managing local administrator accounts can be challenging, especially in large environments with numerous systems and multiple administrators .
The solution's management tools provide easy configuration and administration. How does LAPS work? The core of the LAPS solution is a GPO client-side extension (CSE) that performs the following tasks and can enforce the following actions during a GPO update: • Checks whether the password of the local Administrator account has expired.

Configure Windows LAPS (Local Administrator Passwords Solution) in AD
Windows Local Administrator Password Solution is a simple, built-in feature that allows you to improve the security of using local administrator accounts on domain computers.







Windows LAPS ( Local Administrator Password Solution ) fixes this by automatically generating unique, random local admin passwords per device and rotating them on a schedule, while storing the current password securely in your directory (Azure AD / Entra ID or on-prem Active Directory).