Anyone using LAPS?

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Hi All,

As per title, anyone has anything good/bad to say about LAPS? Especially interested in negatives really. It sounds great on paper but some real world feedback would help

Thanks,

 

It's a program which extends the AD schema to give each computer account a local administrator password field. Then it gives each machine a unique local admin account so you can stop using the same one on all your computers (admit it, we're all guilty). the idea is that you end up with some password you can safely share with users that only works on the machine they have. If a tech needs the local admins for a specific laptop or whatever, they just go to AD to look it up.

More details here. It's good.

 

Thanks Flash, should have added a link. We'll probably end up using it. I can't really find anyone not happy with LAPS - I guess it's not that popular yet.

Not that it would make a domain secure, but after reading a bit on Pass the Hash attacks having same admin accounts on laptop's or servers seems suicidal...