Preview Mode Links will not work in preview mode

7 Minute Security


Dec 19, 2019

Today's episode is brought to you by ITProTV. It’s never too late to start a new career in IT or move up the ladder, and ITProTV has you covered - from CompTIA and Cisco to EC-Council and VMWare. Get over 65 hours of IT training for free by visiting https://itpro.tv/7minute.

Today's episode is all about LAPS - Microsoft's Local Administrator Password solution. In a nutshell, LAPS strengthens and randomizes the local administrator password on the systems across your enterprise. We talked about it way back in episode 252 but figured it was worth a revisit because:

  • It's awesome

  • It's free

  • People still haven't heard of it when I share info about it during conference talks!

  • I've got a full write-up of how to install LAPS here

  • At a recent conference people asked me two awesome edge case questions:

    • What if I aggressively delete inactive machines from my AD - does the LAPS attribute go with it?

    • What do I do if I use Deep Freeze and the LAPS password attribute in AD keeps getting out of sync with the actual password on systems because of Deep Freeze's freeze/thaw times?