← Back to Projects
Business Systems House 2026
Enterprise Local Administrator Password Randomization (LAPS v2)
Windows LAPS v2 Active Directory Entra ID GPO PowerShell Privilege Management
Enterprise Local Administrator Password Randomization (LAPS v2)
Upgraded endpoint local administrator security by deploying modern Windows LAPS with encrypted Active Directory password attributes.
Key Features & Implementation
- Encrypted AD Password Attributes: Configured LAPS v2 to encrypt local administrator passwords in AD using Kerberos domain keys.
- Automated Reset On Read: Enforced immediate automatic local administrator password rotation upon helpdesk checkout.
- Custom Local Admin Account Names: Standardized custom local administrator account naming while disabling default built-in SID 500 accounts.