How to Restrict Account Operators to See the Password in LAPS
Modify Active Directory schema to prevent Account Operators from reading LAPS passwords, and reset permissions on existing computer objects.
1 article
Modify Active Directory schema to prevent Account Operators from reading LAPS passwords, and reset permissions on existing computer objects.