The AD LAPS Password tool lets you view the current AD LAPS password and its expiration. You can also use this tool to give an administrator a specific amount of time to set a LAPS password, allowing you to temporarily elevate permissions.
Beginning with Recast Software Version 5.3.2312.503, this tool works with both Windows LAPS and legacy Microsoft LAPS for both encrypted and non-encrypted/plain-text passwords.
NOTE: Use the similar Set LAPS Password Expiration tool to let an administrator set a new LAPS password without viewing the current password.
To run the tool:
1. In your Configuration Manager console, right-click on a device.
2. Click Right Click Tools > Security Tools > AD LAPS Password.
The LAPS window that opens displays the current Password and its Expiration date. When using Windows LAPS, the local Admin Account Name will also appear. If you are using Legacy Microsoft LAPS, the username will appear as 'Unavailable'.
To set a temporary LAPS Password expiry time:
1. In the LAPS window, enable Expire LAPS Password in X Hours.
2. Click the Up arrow to increase the time in hours.
3. Click Set Expiration.