Showing posts with label LAPS. Show all posts
Showing posts with label LAPS. Show all posts
October 1, 2015
Managing Local Administrator Passwords on Windows Workstations
Microsoft offers the Local Administrator Password Solution (LAPS) to allow administrators to set random and unique passwords on each workstation/server joined to active directory. This tool works by installing a small application on the client machine and then configuring a GPO to apply the specific settings for the password format and expiration intervals. Below are the steps required to configure LAPS.
Server Setup
1. Download LAPS from https://support.microsoft.com/en-us/kb/3062591
2. Run the install on your management workstations and select the three items under the management tools and select next to complete the install.
3. Next run the following command to extend the schema to add the ms-Mcs-AdmPwd & ms-Mcs-AdmPwdExpiration attributes to the computer objects class
4. Next run the following command to set the permission to allow the computer account to update itself and allow domain admins to reset the password.
Subscribe to:
Posts (Atom)