230k views
5 votes
Microsoft tool that manages administrative credentials. It is for randomizing local administrator account credentials using Active Directory

User Mancaus
by
7.4k points

1 Answer

5 votes

Final answer:

LAPS is a Microsoft tool that manages administrative credentials by randomizing local administrator account passwords using Active Directory.

Step-by-step explanation:

The Microsoft tool you are referring to is called Local Administrator Password Solution (LAPS). LAPS is a Group Policy extension that allows you to randomly generate and manage the local administrator account password on domain-joined computers using Active Directory. It provides a more secure approach compared to using static passwords that are common targets for attackers.

LAPS works by setting a unique, randomized password for each computer's local administrator account, which is stored securely in Active Directory and can only be retrieved by authorized users. This eliminates the need for a common, easily guessable password and helps prevent lateral movement within a network in the event of a compromised account.

With LAPS, administrators can easily audit and manage local administrator account passwords across the entire network, ensuring a higher level of security. It enhances password management practices and reduces the risk of unauthorized access to critical systems.

User Ogbofjnr
by
8.2k points
Welcome to QAmmunity.org, where you can ask questions and receive answers from other members of our community.