AD LAPS Password

The AD LAPS Password tool lets you view the current AD LAPS password and its expiration. You can also use this tool to give an administrator a specific amount of time to set a LAPS password, allowing you to temporarily elevate permissions.

NOTE: Use the similar Set LAPS Password Expiration tool to let an administrator set a new LAPS password without viewing the current password.

To run the tool:

1. In your Configuration Manager console, right-click on a device.

2. Click Right Click Tools > Security Tools > AD LAPS Password.

The LAPS window that opens displays the current Password and its Expiration date.


To set a temporary LAPS Password expiry time:

1. In the LAPS window, enable Expire LAPS Password in X Hours.

2. Click the Up arrow to increase the time in hours.

3. Click Set Expiration.