Anyone using LAPS?

Discussion in 'Computer Security' started by Nyx, Oct 3, 2017.

  1. Nyx

    Nyx Byte Poster

    167
    13
    15
    Hi All,

    As per title, anyone has anything good/bad to say about LAPS? Especially interested in negatives really. It sounds great on paper but some real world feedback would help :)

    Thanks,
     
  2. JK2447
    Highly Decorated Member Award 500 Likes Award

    JK2447 Petabyte Poster Administrator

    Top Poster
    of the Month

    6,395
    633
    318
    Not using it never heard of it to be honest. What is it?
     
    Certifications: VCP4, VCP5, VCP6, VCP6.5, BSc (Hons), HND IT, HND Computing, ITIL-F, MBCS CITP, MCP (270,290,291,293,294,298,299,410,411,412) MCTS (401,620,624,652) MCSA:Security, MCSE: Security, Security+, CPTS, CCA (XenApp6.5), MCSA 2012, VSP, VTSP
    WIP: VCAP 6.5 DCV
  3. FlashDangerpants

    FlashDangerpants Byte Poster

    111
    16
    39
    It's a program which extends the AD schema to give each computer account a local administrator password field. Then it gives each machine a unique local admin account so you can stop using the same one on all your computers (admit it, we're all guilty). the idea is that you end up with some password you can safely share with users that only works on the machine they have. If a tech needs the local admins for a specific laptop or whatever, they just go to AD to look it up.

    More details here. It's good.
     
    Certifications: MCITP Exchange 2010, MCSA Svr 2012
    WIP: Exchange 2013
    Nyx likes this.
  4. Nyx

    Nyx Byte Poster

    167
    13
    15
    Thanks Flash, should have added a link. We'll probably end up using it. I can't really find anyone not happy with LAPS - I guess it's not that popular yet.

    Not that it would make a domain secure, but after reading a bit on Pass the Hash attacks having same admin accounts on laptop's or servers seems suicidal...
     
  5. Sparky
    Highly Decorated Member Award

    Sparky Zettabyte Poster Moderator

    10,511
    406
    319
    I've seen a few corporate customers using it - no drama so far.
     
    Certifications: MSc MCSE MCSA:M MCSA:S MCITP:EA MCTS(x5) Security+ Network+ A+
    WIP: Office 365, Server 2016, CEH

Share This Page

Loading...
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.