Security

LAPS (Local Administrator Password Solution)

Microsoft's mechanism for giving each domain-joined computer a unique, rotating local administrator password stored in Active Directory. Whoever can read those attributes can sign in as local admin on the machines in scope.

Deep dive

Learn Article

What an Appliance's LDAP Service Account Can Read in Active Directory

VPN gateways, firewalls and mail appliances bind to Active Directory with a service account. What that account can read is what an attacker gets the day the appliance falls.

intermediate 4 min read

Back to glossary