How to Restrict Account Operators to See the Password in LAPS
Modify Active Directory schema to prevent Account Operators from reading LAPS passwords, and reset permissions on existing computer objects.
4 articles
Modify Active Directory schema to prevent Account Operators from reading LAPS passwords, and reset permissions on existing computer objects.
Server-side deployment including AD schema modification, Group Policy configuration, and password verification for LAPS.
Task sequence creation and deployment procedure for LAPS using SCCM.
Prerequisites and package creation for deploying Local Administrator Password Solution (LAPS) using SCCM.