vontier
May 04, 2023Brass Contributor
Status:
Completed
Capability to Create local user within LAPS policy
Currently LAPS by default act on built-in local administrator user. If you want to have a new one you have to crate using different method. I think the possibility to specify a custom administrator a...
JaySimmons
Microsoft
May 04, 2023vontier - can you please comment on why the Accounts CSP is not suitable for this purpose? Or are you asking for a more integrated solution where messing with the Accounts CSP is never required?
I am looking at adding an automatic local account mgmt feature for Windows LAPS, but it won't be ready anytime soon. There is IMO a potential here to create a confusing mess of overlapping policy responsibilities and I want to make sure that we come up with a clean solution.