Implementing LAPS

Microsoft's free Local Administrator Password Solution (LAPS) allows admins to periodically change the password for the local administrator password on domain-joined devices. This recipe shows how to implement and use it.

Getting ready

First, download LAPS from http://aka.ms/LAPS. Download the *.msi file that corresponds to the client operating system architecture(s) used in the organization. Most likely, this will be x64.

Make sure that all domain controllers in the environment run Windows Server 2003 with Service Pack 1 or a newer version of Windows Server.

If your organization places devices in the default Computers container, move the computer objects that you want to be part of LAPS from this container...