A built-in Windows capability that sets a random local administrator password on each device, changes it regularly and stores a copy in Active Directory or Microsoft Entra ID. Storing it in Entra ID is switched on under Device settings and does not work for Entra registered devices.
Also called Windows Local Administrator Password Solution.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains LAPS in context, with comparison tables and the common traps.
Terms in this definition
- Capability
Something that a person, organisation or system is able to do.
- LSDOU
The sequence in which Group Policy is processed: the local policy first, followed by site, domain and organisational unit policies. The nearest, last-processed setting takes effect unless Enforced or Block Inheritance alters that.
- AD
Short for Active Directory, the directory service built into Windows Server (AD DS). Entra Connect synchronises on-premises forests to Microsoft Entra ID.
- Microsoft Entra ID
Cloud identity service from Microsoft, previously named Azure AD, which provides the tenant behind Microsoft 365 and Azure.