Topic: laps

• Windows LAPS: unique local administrator passwords for Windows Server, and who is allowed to read one

  Windows LAPS (built in to Windows Server 2019 and 2022 with the April 11, 2023 update or later, and to Windows Server 2025) automatically randomizes and rotates each machine's local administrator password and stores it in Active Directory or Microsoft Entra ID; in AD, Domain Admins can read it by default and every other reader needs an explicitly delegated permission.

  article · en · reviewed · knowledge as of 2026-09-24

Machine-readable: JSON