7MS #392: LAPS Reloaded

Today's episode is brought to you by ITProTV. It’s never too late to start a new career in IT or move up the ladder, and ITProTV has you covered - from CompTIA and Cisco to EC-Council and VMWare. Get over 65 hours of IT training for free by visiting https://itpro.tv/7minute.

Note: an updated episode on LAPS is available here: 7MS #523

Today's episode is all about LAPS - Microsoft's Local Administrator Password solution. In a nutshell, LAPS strengthens and randomizes the local administrator password on the systems across your enterprise. We talked about it way back in episode 252 but figured it was worth a revisit because:

• It's awesome

• It's free

• People still haven't heard of it when I share info about it during conference talks!

• I've got a full write-up of how to install LAPS here

• At a recent conference people asked me two awesome edge case questions:

• What if I aggressively delete inactive machines from my AD - does the LAPS attribute go with it?

• What do I do if I use Deep Freeze and the LAPS password attribute in AD keeps getting out of sync with the actual password on systems because of Deep Freeze's freeze/thaw times?