Windows LAPS:: LAPS

in plain english

Automatically rotates the local admin password on every domain-joined / Entra-joined Windows device — different password per machine, stored securely in AD or Entra.

official microsoft definition

An automated solution that randomizes and rotates local administrator account passwords on Windows devices and stores them securely in Active Directory or Microsoft Entra ID, providing a way to recover credentials when needed.

plans & eligibility

• Built into Windows (no license required)
• Entra-joined LAPS requires Entra ID P1+

related on aguidetocloud