Posted by: kurtsh | October 21, 2024

INFO: Windows Local Administrator Password Solution (Windows LAPS)

We released the NEW Windows Local Administrator Password Solution (Windows LAPS) close to a year ago and I’m still running into customers that had no idea the solution (or even the previous Legacy LAPS) solution existed. <yikes>

The Windows Local Administrator Password Solution (Windows LAPS) is a solution that changes the Local Admin password on your Windows clients & servers to a randomly generated password on a regular basis & stores the password in Entra ID directory (formerly Azure AD). A privileged role is given the ability to recover Local Admin passwords if required to ‘backdoor’ a workstation or server.

Windows LAPS has the benefit of preventing lateral movement of bad actors from machine to machine in your infrastructure by ensuring every machine has a different local admin password, while also ensuring that every machine’s admin password is changed regularly.

And did I mention Windows LAPS is free to use for any Windows administrator for supported versions of Windows client & server?

Here are some resources to use in deploying Windows LAPS:

Posted in Uncategorized | Tags: , , , ,

«
»

Categories