Forum Discussion

jesusaz120's avatar
jesusaz120
Copper Contributor
Aug 01, 2023

Intune Windows Labs Password

Hello,

I have configured in intune the team admin password rotation policy for users. I wanted to know if there is any way instead of copying the password and sending it to the users that the password that appears in the intune is automatically sent or that the users request the password by some means and it is delivered automatically or some type of approval since it is a lot of work that the passwords rotate every X days and have to give it to the users. Specifically, what has been implemented is the Windows Local Administrator Password Solution (Windows LAPS)

Thank you

Intune Windows Laps
  • Rudy_Ooms_MVP's avatar
    Rudy_Ooms_MVP
    MVP
    Aug 08, 2023
    Hi... I guess you are missing the core functionality of LAPS. LAPS isnt meant to give your users a possibility to easily get a local admin account to use.
    LAPS was created in the first place to make sure the local administrator password on each device is different and with it making sure pash the hash couldn't succeed
    What you want is more like the EPM solution or a third party admin on demand solution.
  • Mr_Helaas's avatar
    Mr_Helaas
    Steel Contributor
    Aug 06, 2023

    hi jesusaz120,

     

    first of all you should think about why are your users asking for the password of your local admin account. This should not be needed.

     

    From my opinion this account should only be used for rare use cases and can only be used by your device of system administrator.

    If your users needs to perform admin task.

    Please take a look at Microsoft EPM. 

    https://learn.microsoft.com/en-us/mem/intune/protect/epm-overview

     

    kind regards,

     

    Rene 

Resources