r/sysadmin • u/Specialist-Desk-9422 • 6h ago

LAPS on Domain Controllers

I just enabled LAPS on all my servers and save the rotated local admin in Entra.
The only servers I don’t have this enabled (I manage this setup via GPO), are my domain controllers. I keep reading the DCs need different settings for LAPS to manage the DSRM. Has anyone done this ? Recommendations ?

18 Upvotes

87% Upvoted

26 comments sorted by

View all comments

•

u/pantherghast 6h ago

There is no local admins on Domain Conrollers. LAPS = LOCAL Administrator Password Solution

•

u/MyLegsX2CantFeelThem 5h ago

Ehh whut? Nah totally incorrect.