Create an opt-in configuration option that tells the LAPS service to not use certain characters in LAPS-generated passwords, such as o, O, 0, l, 1, etc.
I don't mind characters like 0, 1, o, O, etc. where you can distinguish between them, but lower case L and capital i are indistinguishable (because of the font dictated by the page body CSS).