Where do we configure specific complexity requirements so that LAPS generates compliant passwords during its rotation cycle?

Question

Where do we configure specific complexity requirements so that LAPS generates compliant passwords during its rotation cycle?

Mayer Zaniel 20

We are setting up Windows LAPS for our domain. Our password policy dictates that local administrator passwords must be at least 16 characters long and include numbers, symbols, and mixed case. Where do we configure these specific complexity requirements so that LAPS generates compliant passwords during its rotation cycle?

0 comments

1 answer

Your answer

Answer 1

Hi Mayer Zaniel,

LAPS doesn’t rely on the default domain password policy; instead, you configure its password settings directly through Group Policy or Intune.

Specifically, you’ll want to set the Password Settings under the LAPS configuration policy. In Group Policy, this is located at Computer Configuration > Administrative Templates > System > LAPS. There you can define:

Password length (e.g., 16 characters)
Complexity options (require upper case, lower case, numbers, and special characters)
Password age and expiration settings

If you’re using Intune, the same options are available in the LAPS configuration profile under Endpoint Security > Account Protection. Once applied, LAPS will generate and rotate local administrator passwords according to these rules, ensuring compliance with your policy.

I hope the response provided some helpful insight. If you find this answer useful, please hit “accept answer” so I know it addressed your concern.

Jason.