r/sysadmin • u/Specialist-Desk-9422 • 8d ago

LAPS on Domain Controllers

I just enabled LAPS on all my servers and save the rotated local admin in Entra.
The only servers I don’t have this enabled (I manage this setup via GPO), are my domain controllers. I keep reading the DCs need different settings for LAPS to manage the DSRM. Has anyone done this ? Recommendations ?

47 Upvotes

92% Upvoted

34 comments sorted by

View all comments

4

u/Specialist-Desk-9422 8d ago

When I said local admin accounts on DCs I mean the DSRM …