Windows LAPS
Windows LAPS (Local Administrator Password Solution) secures the built-in local administrator account of every Windows device. Through Intune account-protection policies you enforce password requirements, back the account up to Entra ID (or AD), and rotate the password on a schedule - protection against pass-the-hash and lateral-movement attacks.
Path in the Intune admin center
📍 Endpunktsicherheit › KontoschutzHands-on tasks
- Control local admin rights on Entra-joined devicesMicrosoft Intune - Hands-on Course · Module 08
- Windows LAPS - manage the local admin passwordMicrosoft Intune - Hands-on Course · Windows LAPS - manage the local admin password
- Lock down access to the LAPS password (least privilege)Microsoft Intune - Hands-on Course · Windows LAPS - manage the local admin password
Jump straight to the matching course task (sign-in required).
On Microsoft Learn
Related terms