{"id":242868,"date":"2025-01-26T15:09:23","date_gmt":"2025-01-26T15:09:23","guid":{"rendered":"https:\/\/logmeonce.com\/resources\/enable-local-admin-password-management\/"},"modified":"2025-01-26T15:09:23","modified_gmt":"2025-01-26T15:09:23","slug":"enable-local-admin-password-management","status":"publish","type":"post","link":"https:\/\/logmeonce.com\/resources\/enable-local-admin-password-management\/","title":{"rendered":"Enable Local Admin Password Management on Windows"},"content":{"rendered":"<div class=\"336cb5b64765e27a1a6c1bb71b941f1a\" data-index=\"1\" style=\"float: none; margin:10px 0 10px 0; text-align:center;\">\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-4830628043307652\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- above content -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-4830628043307652\"\r\n     data-ad-slot=\"5864845439\"\r\n     data-ad-format=\"auto\"\r\n     data-full-width-responsive=\"true\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<\/div>\n<p>In the ever-evolving landscape of cybersecurity, the emergence of leaked passwords can spell disaster for individuals and organizations alike. Recently, a notable instance of <strong>password leakage<\/strong> occurred when sensitive information was exposed through a high-profile <strong>data breach<\/strong>, affecting millions of users worldwide. This incident underscores the importance of robust password management systems, as leaked passwords can lead to <strong>unauthorized access<\/strong>, <strong>identity theft<\/strong>, and significant financial losses. For everyday users, understanding the implications of such leaks is crucial, as it highlights the need for proactive measures, such as adopting solutions like <strong>Windows LAPS<\/strong>, which automatically manages and secures administrative passwords to protect against potential threats.<\/p>\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_77 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/logmeonce.com\/resources\/enable-local-admin-password-management\/#Key_Highlights\" >Key Highlights<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/logmeonce.com\/resources\/enable-local-admin-password-management\/#Understanding_Windows_LAPS_and_Its_Importance\" >Understanding Windows LAPS and Its Importance<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/logmeonce.com\/resources\/enable-local-admin-password-management\/#System_Requirements_and_Prerequisites\" >System Requirements and Prerequisites<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/logmeonce.com\/resources\/enable-local-admin-password-management\/#Setting_Up_LAPS_Through_Microsoft_Intune\" >Setting Up LAPS Through Microsoft Intune<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/logmeonce.com\/resources\/enable-local-admin-password-management\/#Configuring_LAPS_in_Active_Directory\" >Configuring LAPS in Active Directory<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/logmeonce.com\/resources\/enable-local-admin-password-management\/#Password_Management_Policy_Guidelines\" >Password Management Policy Guidelines<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/logmeonce.com\/resources\/enable-local-admin-password-management\/#Security_Best_Practices_for_LAPS_Implementation\" >Security Best Practices for LAPS Implementation<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/logmeonce.com\/resources\/enable-local-admin-password-management\/#Role-Based_Access_Control_Setup\" >Role-Based Access Control Setup<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/logmeonce.com\/resources\/enable-local-admin-password-management\/#Password_Recovery_and_Management_Procedures\" >Password Recovery and Management Procedures<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/logmeonce.com\/resources\/enable-local-admin-password-management\/#Monitoring_and_Auditing_LAPS_Activities\" >Monitoring and Auditing LAPS Activities<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/logmeonce.com\/resources\/enable-local-admin-password-management\/#Troubleshooting_Common_LAPS_Issues\" >Troubleshooting Common LAPS Issues<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/logmeonce.com\/resources\/enable-local-admin-password-management\/#Frequently_Asked_Questions\" >Frequently Asked Questions<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/logmeonce.com\/resources\/enable-local-admin-password-management\/#Can_LAPS_Passwords_Be_Used_for_Remote_Desktop_Connections\" >Can LAPS Passwords Be Used for Remote Desktop Connections?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/logmeonce.com\/resources\/enable-local-admin-password-management\/#What_Happens_to_LAPS_if_a_Device_Loses_Network_Connectivity\" >What Happens to LAPS if a Device Loses Network Connectivity?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/logmeonce.com\/resources\/enable-local-admin-password-management\/#Does_LAPS_Work_With_Virtual_Machines_and_Cloud-Hosted_Environments\" >Does LAPS Work With Virtual Machines and Cloud-Hosted Environments?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/logmeonce.com\/resources\/enable-local-admin-password-management\/#Can_Multiple_Administrator_Accounts_Be_Managed_Simultaneously_Through_LAPS\" >Can Multiple Administrator Accounts Be Managed Simultaneously Through LAPS?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/logmeonce.com\/resources\/enable-local-admin-password-management\/#How_Does_LAPS_Handle_Password_Changes_During_System_Maintenance_Windows\" >How Does LAPS Handle Password Changes During System Maintenance Windows?<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/logmeonce.com\/resources\/enable-local-admin-password-management\/#The_Bottom_Line\" >The Bottom Line<\/a><\/li><\/ul><\/nav><\/div>\n<h2><span class=\"ez-toc-section\" id=\"Key_Highlights\"><\/span>Key Highlights<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<ul>\n<li>Access Microsoft Entra admin center and locate the LAPS settings section to begin enabling local password management.<\/li>\n<li>Create and configure a password policy in Intune, specifying password length, complexity, and expiration requirements.<\/li>\n<li>Ensure systems meet prerequisites including .NET Framework 4.0, PowerShell 2.0, and Windows updates from April 2023 onwards.<\/li>\n<li>Assign target computers to specific groups for policy application and verify Active Directory is properly configured.<\/li>\n<li>Enable password auditing and monitoring through Event Viewer to track access attempts and ensure security compliance.<\/li>\n<\/ul>\n<h2><span class=\"ez-toc-section\" id=\"Understanding_Windows_LAPS_and_Its_Importance\"><\/span>Understanding Windows LAPS and Its Importance<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<div class=\"body-image-wrapper\" style=\"margin-bottom:20px\"><img decoding=\"async\" height=\"100%\" src=\"https:\/\/logmeonce.com\/resources\/wp-content\/uploads\/2025\/01\/windows_laps_significance_explained.jpg\" alt=\"windows laps significance explained\" title=\"\"><\/div>\n<p>Imagine your computer is like a treasure chest that needs a special key to open it! You wouldn&#039;t want someone else finding your treasure, right? That&#039;s where <strong>Windows LAPS<\/strong> comes in &#8211; it&#039;s like having a magical locksmith who creates <strong>special keys<\/strong> for each computer!<\/p>\n<p>Think of it this way: if you&#039;d the same key for every treasure chest in town, someone who found one key could open them all! Yikes! But with LAPS, each computer gets its own <strong>unique password<\/strong> (that&#039;s like having different keys for different chests).<\/p>\n<p>It&#039;s super smart because it <strong>changes these passwords automatically<\/strong>, just like how you might change your secret hiding spot for your favorite toys! Only <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.blumira.com\/glossary\/local-administrator-password-solution-laps\">eligible users<\/a> can view or request these special passwords.<\/p>\n<p>Want to know the coolest part? LAPS keeps these passwords super safe in a special vault called <strong>Active Directory<\/strong>. It&#039;s like having the world&#039;s most <strong>secure cookie jar<\/strong>!<\/p>\n<h2><span class=\"ez-toc-section\" id=\"System_Requirements_and_Prerequisites\"><\/span>System Requirements and Prerequisites<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Before we <strong>plunge into the fun world<\/strong> of LAPS, let&#039;s make sure your computer is ready for this adventure! LAPS requires <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.varonis.com\/blog\/microsoft-laps\">.NET Framework 4.0<\/a> and PowerShell 2.0 at minimum to function properly.<\/p>\n<p>Think of it like checking if you have all your crayons before starting a big art project. You&#039;ll need Windows (just like your favorite video game needs the <strong>right console to work<\/strong>), and it must be updated to April 2023 or newer.<\/p>\n<p>Here are the <strong>super important things you need<\/strong>:<\/p>\n<ol>\n<li>A Windows computer that&#039;s gotten its April 2023 updates (like getting new shoes when you outgrow old ones)<\/li>\n<li>Active Directory set up correctly (it&#039;s like having a special clubhouse where passwords live)<\/li>\n<li>Permission for computers to write their own passwords (imagine being able to pick your own secret hideout code!)<\/li>\n<\/ol>\n<p>Don&#039;t worry if this sounds tricky &#8211; I&#039;ll help you through each step!<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Setting_Up_LAPS_Through_Microsoft_Intune\"><\/span>Setting Up LAPS Through Microsoft Intune<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<div class=\"body-image-wrapper\" style=\"margin-bottom:20px\"><img decoding=\"async\" height=\"100%\" src=\"https:\/\/logmeonce.com\/resources\/wp-content\/uploads\/2025\/01\/laps_configuration_via_intune.jpg\" alt=\"laps configuration via intune\" title=\"\"><\/div>\n<p>Now that you&#039;ve got your computer ready, let&#039;s set up <strong>LAPS<\/strong> through <strong>Microsoft Intune<\/strong> &#8211; it&#039;s like giving your computer a special lock with a magic key!<\/p>\n<p>First, we&#039;ll visit the Microsoft Entra admin center, which is like the control room of a spaceship. Have you ever played with a light switch? That&#039;s exactly what we&#039;ll do when we turn LAPS on!<\/p>\n<p>Next, we&#039;ll <strong>create<\/strong> a <strong>special policy<\/strong> in Intune &#8211; think of it as writing rules for a fun game. You can set the <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.prajwaldesai.com\/set-up-windows-laps-with-intune\/\">password age to 30<\/a> days to help keep things secure.<\/p>\n<p>We&#039;ll pick which computers get to play by assigning them to <strong>groups<\/strong>, just like picking teams at recess.<\/p>\n<p>Then, we&#039;ll check our work and press the magical &#034;Create&#034; button! Your computer will get its new password rules the next time it checks in, kind of like when you check in with your teacher every morning.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Configuring_LAPS_in_Active_Directory\"><\/span>Configuring LAPS in Active Directory<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Getting <strong>LAPS ready<\/strong> in <strong>Active Directory<\/strong> is like setting up a super-secret clubhouse! You&#039;ll need some <strong>special tools<\/strong> and permissions to make everything work just right.<\/p>\n<p>Think of it like getting the perfect ingredients for your favorite cookie recipe!<\/p>\n<p>Let me show you three amazing things we&#039;ll do to set up LAPS:<\/p>\n<ol>\n<li>Install the LAPS program (it&#039;s like downloading your favorite game!)<\/li>\n<li>Update something called the &#034;AD schema&#034; (imagine adding a new room to your house)<\/li>\n<li>Create special rules in Group Policy (like making rules for a fun new playground game)<\/li>\n<\/ol>\n<p>Don&#039;t worry if these sound tricky &#8211; we&#039;ll make it fun!<\/p>\n<p>First, let&#039;s download LAPS.x64.msi from Microsoft&#039;s website. Have you ever installed a new app? It&#039;s just like that!<\/p>\n<p>Then we&#039;ll use <strong>PowerShell<\/strong> (our <strong>magic wand<\/strong>) to make everything work perfectly.<\/p>\n<p>You&#039;ll need to make sure your system has <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/techcommunity.microsoft.com\/blog\/itopstalkblog\/step-by-step-guide-how-to-configure-microsoft-local-administrator-password-solut\/2806185\">PowerShell 2.0 or later<\/a> before getting started.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Password_Management_Policy_Guidelines\"><\/span>Password Management Policy Guidelines<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<div class=\"body-image-wrapper\" style=\"margin-bottom:20px\"><img decoding=\"async\" height=\"100%\" src=\"https:\/\/logmeonce.com\/resources\/wp-content\/uploads\/2025\/01\/password_security_best_practices.jpg\" alt=\"password security best practices\" title=\"\"><\/div>\n<p>Managing passwords with LAPS is like having a super-special vault for your favorite toys! Just like you wouldn&#039;t want anyone to find your secret hideout, we need to keep our computer passwords safe and strong. <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.miradore.com\/knowledge\/windows\/windows-10-password-policy\/\">Active Directory accounts<\/a> are not affected by these password policies. Implementing <a target=\"_blank\" href=\"https:\/\/logmeonce.com\/resources\/importance-of-mfa\/\">Multi-Factor Authentication<\/a> can further enhance our password security.<\/p>\n<table>\n<thead>\n<tr>\n<th style=\"text-align: center\">Setting<\/th>\n<th style=\"text-align: center\">What it Does<\/th>\n<th style=\"text-align: center\">Fun Example<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"text-align: center\">Password Length<\/td>\n<td style=\"text-align: center\">Makes passwords long enough<\/td>\n<td style=\"text-align: center\">Like counting pizza slices (8-64)<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: center\">Password Age<\/td>\n<td style=\"text-align: center\">When to change it<\/td>\n<td style=\"text-align: center\">Like getting new shoes (up to 365 days)<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: center\">Password Type<\/td>\n<td style=\"text-align: center\">How tricky it should be<\/td>\n<td style=\"text-align: center\">Like mixing colors in paint<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>I&#039;ll help you make awesome passwords that are super strong! We can use big letters, small letters, numbers, and special symbols &#8211; just like mixing ingredients for a magical potion. Have you ever made up a secret code with your friends? That&#039;s exactly what we&#039;re doing here, but even cooler!<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Security_Best_Practices_for_LAPS_Implementation\"><\/span>Security Best Practices for LAPS Implementation<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>While setting up <strong>LAPS<\/strong> is super exciting, we need to follow some <strong>special safety rules<\/strong> &#8211; just like wearing a helmet when riding your bike!<\/p>\n<p>Think of LAPS as a <strong>super-secret password keeper<\/strong> that helps protect your computer like a shield. You wouldn&#039;t share your secret hideout location with everyone, right? The system requires a <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/lazyadmin.nl\/it\/microsoft-laps\/\">Domain Functional Level 2016<\/a> or newer to operate properly. Additionally, implementing <a target=\"_blank\" href=\"https:\/\/logmeonce.com\/resources\/mfa-for-active-directory-administrators\/\">multi-factor authentication<\/a> can further enhance the security of your local admin accounts.<\/p>\n<p>Here are three super important things I want you to remember:<\/p>\n<ol>\n<li>Make passwords super tricky &#8211; mix up letters, numbers, and symbols like making the world&#039;s most complicated secret code.<\/li>\n<li>Change passwords often, like how you change your favorite snacks each week.<\/li>\n<li>Only let trusted people (like your IT teachers) see the passwords, just like only letting your best friends know where you hide your favorite toys.<\/li>\n<\/ol>\n<p>Isn&#039;t it amazing how we can keep our computers safe?<\/p>\n<p>Just remember: keeping secrets safe is like being a <strong>digital superhero<\/strong>!<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Role-Based_Access_Control_Setup\"><\/span>Role-Based Access Control Setup<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<div class=\"body-image-wrapper\" style=\"margin-bottom:20px\"><img decoding=\"async\" height=\"100%\" src=\"https:\/\/logmeonce.com\/resources\/wp-content\/uploads\/2025\/01\/access_control_configuration_setup.jpg\" alt=\"access control configuration setup\" title=\"\"><\/div>\n<p>Now that we&#039;ve got our secret password keeper all set up, let&#039;s play a fun game called &#034;Role-Based Access Control&#034; &#8211; I like to call it the &#034;playground permission game!&#034;<\/p>\n<p>You know how some playground equipment has special rules about who can use it? Think of RBAC like being a playground monitor. Some kids get to use the big-kid swings, while others stick to the smaller ones.<\/p>\n<p>In our computer world, I&#039;ll help you set up <strong>special permission cards<\/strong> (we call them roles) for different people. Want to know who gets to do what?<\/p>\n<p>Let&#039;s create these special cards together! First, we&#039;ll make a list of all our computer stuff &#8211; like making an <strong>inventory of playground toys<\/strong>.<\/p>\n<p>Then, we&#039;ll decide <strong>who gets to play<\/strong> with what. Cool, right? We&#039;ll use <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/petri.com\/windows-admin-center-rbac\/\">PowerShell Just Enough Administration<\/a> to make sure everyone follows the playground rules.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Password_Recovery_and_Management_Procedures\"><\/span>Password Recovery and Management Procedures<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Let&#039;s talk about <strong>keeping our computer passwords safe<\/strong> and sound! You know how you keep your favorite toys in a <strong>special box<\/strong>? That&#039;s just like how we need to keep our computer passwords <strong>super safe<\/strong>. I&#039;ll show you some cool ways to do this!<\/p>\n<ol>\n<li>Use Microsoft LAPS &#8211; it&#039;s like having a robot make special passwords for each computer.<\/li>\n<li>Keep a backup plan ready, like using Safe Mode (it&#039;s like a computer&#039;s superhero mode!).<\/li>\n<li>Set up security questions &#8211; just like how your teacher knows your pet&#039;s name.<\/li>\n<\/ol>\n<p>Sometimes passwords get lost, just like socks in the laundry! But don&#039;t worry &#8211; you can use tools like System Restore to go back in time, or ask your computer questions you set up before. Isn&#039;t that neat?<\/p>\n<p>You can get passwords quickly using the handy <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/blog.netwrix.com\/2021\/12\/02\/5-top-local-administrator-password-solution-laps-tips\/\">LAPS Fat Client<\/a>, which shows all your passwords in a simple window.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Monitoring_and_Auditing_LAPS_Activities\"><\/span>Monitoring and Auditing LAPS Activities<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<div class=\"body-image-wrapper\" style=\"margin-bottom:20px\"><img decoding=\"async\" height=\"100%\" src=\"https:\/\/logmeonce.com\/resources\/wp-content\/uploads\/2025\/01\/laps_activities_oversight_process.jpg\" alt=\"laps activities oversight process\" title=\"\"><\/div>\n<p>Once we&#039;ve our <strong>super-secret passwords<\/strong> locked away, we need to keep an eye on them &#8211; just like how a security guard watches over a treasure chest!<\/p>\n<p>I&#039;ll show you how we can be <strong>password detectives<\/strong> using something called <strong>Event Viewer<\/strong>. It&#039;s like having a magical window that lets us see who&#039;s been peeking at our passwords! When monitoring Windows LAPS usage, look for <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.rockenroll.tech\/2023\/05\/15\/windows-laps-more-than-just-a-policy\/\">Event ID 4720<\/a> to identify any creation of new unallowed local accounts.<\/p>\n<p>Want to be an even better detective? We can turn on special tracking (we call it &#034;auditing&#034;) that writes down every time someone looks at a password.<\/p>\n<p>It&#039;s like having a <strong>security camera<\/strong> in your cookie jar &#8211; you&#039;ll know if your brother&#039;s been sneaking treats!<\/p>\n<p>And if you need extra help, there are cool tools like <strong>ADAudit Plus<\/strong> that work like a super-smart robot assistant, watching over your passwords day and night.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Troubleshooting_Common_LAPS_Issues\"><\/span>Troubleshooting Common LAPS Issues<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Just like when your toy cars get stuck and need a little help to zoom again, sometimes LAPS has <strong>hiccups<\/strong> too!<\/p>\n<p>When LAPS isn&#039;t working quite right, I&#039;ll help you figure out what&#039;s wrong. It&#039;s like being a <strong>computer detective<\/strong>!<\/p>\n<p>Here are the most common issues we might need to solve:<\/p>\n<ol>\n<li><strong>Network Connection Problems<\/strong>: When LAPS can&#039;t talk to the computer in charge (we call it a domain controller), it&#039;s like when your walkie-talkie loses signal to your friend!<\/li>\n<li><strong>Password Update Troubles<\/strong>: Sometimes LAPS has trouble changing passwords &#8211; just like when you can&#039;t remember your new locker combination at school!<\/li>\n<li><strong>Policy Problems<\/strong>: When password rules don&#039;t match up, it&#039;s like trying to fit a square block in a round hole! Using <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/www.ravenswoodtechnology.com\/6-tips-to-harden-your-windows-laps-deployment\/\">AES 256-bit encryption<\/a> helps keep your LAPS passwords extra safe from bad guys trying to peek at them.<\/li>\n<\/ol>\n<p>Remember to check your <strong>Event Viewer<\/strong> for special numbers called Event IDs &#8211; they&#039;re like secret codes that tell us what&#039;s wrong!<\/p>\n<h2><span class=\"ez-toc-section\" id=\"Frequently_Asked_Questions\"><\/span>Frequently Asked Questions<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<h3><span class=\"ez-toc-section\" id=\"Can_LAPS_Passwords_Be_Used_for_Remote_Desktop_Connections\"><\/span>Can LAPS Passwords Be Used for Remote Desktop Connections?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Yes, I can use <strong>LAPS passwords<\/strong> for <strong>remote desktop connections<\/strong>!<\/p>\n<p>It&#039;s super safe because each computer gets its own <strong>special password<\/strong> that changes automatically.<\/p>\n<p>Think of it like having a different secret code for each door in your house.<\/p>\n<p>I&#039;ll connect to remote computers using these unique passwords, and if someone tries to be sneaky, they can&#039;t use the password on other computers.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"What_Happens_to_LAPS_if_a_Device_Loses_Network_Connectivity\"><\/span>What Happens to LAPS if a Device Loses Network Connectivity?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>When your device can&#039;t talk to the network, LAPS gets a bit stuck &#8211; like when you can&#039;t phone your friend!<\/p>\n<p>It&#039;ll keep using the <strong>same password<\/strong> it had before, but it can&#039;t <strong>create new ones<\/strong> until it reconnects.<\/p>\n<p>Think of it like a <strong>broken walkie-talkie<\/strong> &#8211; the old message stays, but you can&#039;t send new ones.<\/p>\n<p>Once your device finds its network friend again, LAPS will happily start making new passwords.<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Does_LAPS_Work_With_Virtual_Machines_and_Cloud-Hosted_Environments\"><\/span>Does LAPS Work With Virtual Machines and Cloud-Hosted Environments?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>Yes, I can tell you that LAPS works great with <strong>virtual machines<\/strong> and <strong>cloud environments<\/strong>!<\/p>\n<p>It&#039;s just like playing with your favorite toy &#8211; it doesn&#039;t matter if it&#039;s at home or at a friend&#039;s house.<\/p>\n<p>As long as your virtual machine runs Windows 10, 11, Server 2019, or Server 2022, LAPS will work perfectly.<\/p>\n<p>You can even use it with cloud services like Azure!<\/p>\n<h3><span class=\"ez-toc-section\" id=\"Can_Multiple_Administrator_Accounts_Be_Managed_Simultaneously_Through_LAPS\"><\/span>Can Multiple Administrator Accounts Be Managed Simultaneously Through LAPS?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>I&#039;ll tell you a cool thing about LAPS &#8211; it can handle <strong>multiple admin accounts<\/strong> at once!<\/p>\n<p>Think of it like having different keys for different doors in your house. You can set up LAPS to manage separate administrator accounts on different computers.<\/p>\n<p>It&#039;s like being a <strong>password superhero<\/strong>, keeping track of all these special accounts to keep your computers safe. You can even use <strong>automatic mode<\/strong> to create new accounts whenever needed!<\/p>\n<h3><span class=\"ez-toc-section\" id=\"How_Does_LAPS_Handle_Password_Changes_During_System_Maintenance_Windows\"><\/span>How Does LAPS Handle Password Changes During System Maintenance Windows?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p>I&#039;ll tell you how <strong>LAPS handles passwords<\/strong> during maintenance!<\/p>\n<p>LAPS is smart &#8211; it knows when you&#039;re doing <strong>system maintenance<\/strong> and automatically resets the <strong>password counter<\/strong>.<\/p>\n<p>Think of it like getting a fresh start! During things like re-imaging, LAPS waits until the maintenance is done, then updates the password.<\/p>\n<p>It&#039;s like waiting for your sandwich to finish toasting before adding new toppings.<\/p>\n<h2><span class=\"ez-toc-section\" id=\"The_Bottom_Line\"><\/span>The Bottom Line<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>Now that you&#039;ve set up Local Admin Password Management (LAPS) on your Windows system, it&#039;s crucial to extend that commitment to overall <strong>password security<\/strong>. In today&#039;s digital landscape, robust password management is not just an option&#x2014;it&#039;s a necessity. With threats lurking around every corner, safeguarding your accounts with <strong>strong, unique passwords<\/strong> is essential.<\/p>\n<p>To take your security to the next level, consider exploring advanced solutions like <strong>passkey management<\/strong>. By securely storing and managing your passwords, you can simplify your login processes while enhancing security.<\/p>\n<p>Don&#039;t wait until it&#039;s too late! Start protecting your digital assets today. Sign up for a free account at <a href=\"https:\/\/logmeonce.com\/\">LogMeOnce<\/a> and discover how easy it can be to <strong>manage your passwords<\/strong> and passkeys securely. Empower yourself with the tools you need to keep your information safe and sound!<\/p>\n\n<div style=\"font-size: 0px; height: 0px; line-height: 0px; margin: 0; padding: 0; clear: both;\"><\/div>","protected":false},"excerpt":{"rendered":"<p>Automate your Windows admin password security and discover how LAPS protects your systems from unauthorized access.<\/p>\n","protected":false},"author":5,"featured_media":242867,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[24718],"tags":[35948,35947,15614],"class_list":["post-242868","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-password","tag-laps-management","tag-local-admin-password","tag-windows-security"],"acf":[],"_links":{"self":[{"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/posts\/242868","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/comments?post=242868"}],"version-history":[{"count":0,"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/posts\/242868\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/media\/242867"}],"wp:attachment":[{"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/media?parent=242868"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/categories?post=242868"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/logmeonce.com\/resources\/wp-json\/wp\/v2\/tags?post=242868"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}