Policy
Configure password backup directory
Microsoft Windows
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows10
Use this setting to configure which directory the local admin account password is backed up to. The allowable settings are: 0=Disabled (password will not be backed up) 1=Backup the password to Azure Active Directory 2=Backup the password to Active Directory If not specified, this setting will default to 0 (Disabled). If this setting is configured to 1, and the managed device is not joined to Azure Active Directory, the local administrator password will not be managed. If this setting is configured to 2, and the managed device is not joined to Active Directory, the local administrator password will not be managed. If this setting is disabled or not configured, the local administrator password is not managed. See https://go.microsoft.com/fwlink/?linkid=2188435 for more information.
Registry values
How enabled and disabled states update the registry.
No explicit registry values are set for enabled or disabled states.
Policy elements
Inputs and configuration options exposed by this policy.
| Scope | Element | Type | Registry mapping | Constraints & behavior | Copy |
|---|---|---|---|---|---|
| Computer | Backup directory ID LAPS_BackupDirectory | enum | Path SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS Value name BackupDirectory Type REG_DWORD | Options: Disabled (0), Azure Active Directory (1), Active Directory (2) |