How to Restrict Account Operators to See the Password in LAPS
Modify Active Directory schema to prevent Account Operators from reading LAPS passwords, and reset permissions on existing computer objects.
4 articles
Modify Active Directory schema to prevent Account Operators from reading LAPS passwords, and reset permissions on existing computer objects.
Server-side deployment including AD schema modification, Group Policy configuration, and password verification for LAPS.
Prerequisites and package creation for deploying Local Administrator Password Solution (LAPS) using SCCM.
Task sequence creation and deployment procedure for LAPS using SCCM.