Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Setting

Description

Specify the target account to manage

Two options are available:

  • Manage a custom admin account
    A custom account will be managed by Windows LAPS.

  • Manage the built-in admin account
    The Built-in Administrator account will be managed by Windows LAPS (by its well-known RID).

Automatic account name (or name prefix)

The name of the account that Windows LAPS will manage the password for (or the prefix on the name of the account if Randomize the name of the managed account is checked.)

When not specified, this defaults to WLapsAdmin (even when the targeted account is the Built-in Administrator).

Enable the managed account (checkbox)

If checked, the account will be enabled by LAPS.

If unchecked, the account will be disabled by LAPS.

Randomize the name of the managed account (checkbox)

If checked, the Automatic account name (or name prefix) will be treated as a prefix; a suffix of eight random numbers will be added to it. The name will also be randomized every time the password is changed.

If unchecked, the Automatic account name (or name prefix) will be treated as the account name.

Frequently Asked Questions

...

Panel
panelIconIdatlassian-question_mark
panelIcon:question_mark:
panelIconText:question_mark:
bgColor#F4F5F7

Q1: Will Windows LAPS create the custom managed account if it does not exist? Will it enable it if it is not enabled?

A1: In order to have Windows LAPS create the managed account if it does not exist, you must enable automatic account management.
In order to have Windows LAPS ensure the managed account is enabled, you must also select Enable the managed account.

...