The AD LAPS Password tool lets you view the current AD LAPS password and its expiration. You can also use this tool to give an administrator a specific amount of time to set a LAPS password, allowing you to temporarily elevate permissions.
Beginning with Recast Software Version 5.3.2312.503, this tool works with both Windows LAPS and legacy Microsoft LAPS for both encrypted and non-encrypted/plain-text passwords.
NOTE: Use the similar Set LAPS Password Expiration tool to let an administrator set a new LAPS password without viewing the current password.
To run the tool:
1. In your Configuration Manager console, right-click on a device.
2. Click Right Click Tools > Security Tools > AD LAPS Password.
The LAPS window that opens displays the current Password and its Expiration date. When using Windows LAPS, the local Admin Account Name will also appear.
To set a temporary LAPS Password expiry time:
1. In the LAPS window, enable Expire LAPS Password in X Hours.
2. Click the Up arrow to increase the time in hours.
3. Click Set Expiration.