Detections
Analytics

Configure password backup directory

Information

Use this setting to configure which directory the local admin account password is backed up to.

The allowable settings are:0=Disabled (password will not be backed up)1=Backup the password to Azure Active Directory2=Backup the password to Active DirectoryIf not specified this setting will default to 0 (Disabled).If this setting is configured to 1 and the managed device is not joined to Azure Active Directory the local administrator password will not be managed.

If this setting is configured to 2 and the managed device is not joined to Active Directory the local administrator password will not be managed.

If this setting is disabled or not configured the local administrator password is not managed.

See https://go.microsoft.com/fwlink/?linkid=2188435 for more information.

Solution

Policy Path: System\LAPS
Policy Setting Name: Configure password backup directory

See Also

https://techcommunity.microsoft.com/t5/microsoft-security-baselines/windows-11-version-23h2-security-baseline/ba-p/3967618

Item Details

Plugin: Windows

Control ID: 8f93d9dc1284041a9db245be10ed90e512290df4b92785b2c862676cb477fee5