What is Microsoft (LAPS) Local Administrator Password Solution?

[@kissszilard4220]

6:17 What if the machine does not connect to the domain when the password expires? LAPS is not an OTP-based tool to change both the client and the domain at the same time. Because if it changes on the client but not on the domain, it wouldn't make much sense. The remote systems will keep the same LAPS password while they are offline, and it will change when they communicate with a DC.

[@cloudscholars]

That is correct. I had this experience at my last job. It had a stale account password.

[@scotterdoos]

I hate to be the bearer of bad news, but this information is out of date as of April 2023. Windows LAPS is now integrated into the client OS and no longer requires the legacy LAPS client to be installed.

[@cloudscholars]

Thank you for your response! This video was created earlier this year and published last month. I'm working on creating an updated video.

[@marioa.2983]

@@cloudscholars When are you going to upload the updated video? so the client is integrated into the OS but how to do manage the clients in AD? I haven't found any installer to replace the Fat Client UI; is it only thru PS?

[@cloudscholars]

Thank you for your response. I should have something setup by May. I'm creating an ethical hacker video. Once I wrap that up I can work on the updated one.