Sample Local Administrator Password Solution Documentation

LAPS is implemented following the instructions in the LAPS Operations Guide which can be downloaded here.

The OUs cacomputers and Mem_Svrs are configured to have their computers' local admin accounts managed by LAPS. The user group dept-helpdesk has permissions to view and reset the local admin account passwords on computers in those OUs.

A GPO named LAPS is assigned to the cacomputers and Mem_Svrs OUs and specifies the LAPS settings.

LAPS must be installed manually on any computer it will be managed from. LAPS is deployed via SCCM (the msi is located in Software$\LAPS on the SCCM server) to all desktop and server clients.

See the Sample Security Protocols for Domain and Local Accounts for more information.

  • servers/domain_controllers/laps.txt
  • Last modified: 2019/03/15 15:16
  • by ericclaus