AD LAPS Password

The AD LAPS Password tool lets you view the current AD LAPS password and its expiration. You can also use this tool to give an administrator a specific amount of time to set a LAPS password, allowing you to temporarily elevate permissions.

Beginning with Recast Software Version 5.3.2312.503, this tool works with both Windows LAPS and legacy Microsoft LAPS for both encrypted and non-encrypted/plain-text passwords.

NOTE: Use the similar Set LAPS Password Expiration tool to let an administrator set a new LAPS password without viewing the current password.

To run the tool:

1. In your Configuration Manager console, right-click on a device.

2. Click Right Click Tools > Security Tools > AD LAPS Password.

The LAPS window that opens displays the current Password and its Expiration date. When using Windows LAPS, the local Admin Account Name will also appear.

To set a temporary LAPS Password expiry time:

1. In the LAPS window, enable Expire LAPS Password in X Hours.

2. Click the Up arrow to increase the time in hours.

3. Click Set Expiration.

Copyright © 2023 Recast Software, LLC. All rights reserved.