Local Administrator Password Solution (LAPS)

Enumerate LAPS Configuration

1. Check LAPS Installation Directory Verify if the LAPS client is installed by checking the directory:

   dir "C:\Program Files\LAPS\CSE"

2. List Available Commands Related to LAPS Use PowerShell to find available commands for LAPS:

   Get-Command *AdmPwd*

3. Check Extended Rights for a Group Use the following command to find extended rights for a specific group in LAPS:

   Find-AdmPwdExtendedRights -Identity <Group>

4. Enumerate Group Membership Check the group membership using the net command:

   net groups <Group>

---

Getting the Password

To retrieve the local administrator password for a specific computer, use:

Get-AdmPwdPassword -ComputerName creds-harvestin

---