Loading page
See when a LAPS password is due, whether randomization spreads the load, and a Policy CSP sketch for Intune.
Background: shared local admin and Windows LAPS.
Intune Policy CSP sketch
Policy CSP: ./Device/Vendor/MSFT/LAPS/Policies BackupDirectory: 1 (backup to Entra ID) PasswordAgeDays: 30 PasswordExpirationRandomizationTime: 8 PasswordComplexity: 4 (large alphabet) PasswordLength: 16 PostAuthenticationResetDelay: 8 (hours, after an admin logon) PostAuthenticationActions: 3 (reset password and logoff)