AutomoxAutomox

Implementation of laps

VFS
February 11, 2022 at 6:15 pm UTC
#security

We’re currently evaluating implementing LAPS, and I was curious as to who has done it recently and your experiences in undertaking it.   

This discussion is archived and closed to replies. Continue it in the Automox Community Slack.

Discuss on Slack

Replies (2)

jack.smithFebruary 11, 2022
#1

What I liked about it

  • easy to implement into AD
    • Use AD group to scope access
    • GPO to scope what devices use LAPS
  • easy to deploy with Automox
  • for devices on network all the time, works great
  • retrieve password with GUI or PowerShell

What I didn't’ like

  • Resetting password requires rebooting device
  • Only works on domain joined devices
  • Reporting is manual effort
  • Lack of logs for troubleshooting

 

Here is a worklet and process that helped me get through using it all. 

 

AnonymousFebruary 14, 2022
#2

I was just about to page @jack.smith. Excellent.