Policy overview

Key metadata and intent for this policy.

ClassComputer
CategorySystem > LAPS
Supported onAt least Microsoft Windows 10 or later

Supported OS tags: Windows10

Use this setting to configure which directory the local admin account password is backed up to. The allowable settings are: 0=Disabled (password will not be backed up) 1=Backup the password to Azure Active Directory 2=Backup the password to Active Directory If not specified, this setting will default to 0 (Disabled). If this setting is configured to 1, and the managed device is not joined to Azure Active Directory, the local administrator password will not be managed. If this setting is configured to 2, and the managed device is not joined to Active Directory, the local administrator password will not be managed. If this setting is disabled or not configured, the local administrator password is not managed. See https://go.microsoft.com/fwlink/?linkid=2188435 for more information.

Internal name
LAPS_BackupDirectory
Policy ID
419b1a81a42e
Elements
1

Registry values

How enabled and disabled states update the registry.

No explicit registry values are set for enabled or disabled states.

Policy elements

Inputs and configuration options exposed by this policy.

ElementTypeRegistry mappingConstraints & behavior
Backup directory
ID LAPS_BackupDirectory
enum
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS\BackupDirectory
Type REG_DWORD
Options: Disabled (0), Azure Active Directory (1), Active Directory (2)

Other policies in this category

Explore related policies at the same level.