We have deployed LAPS throughout the organisation to secure and centralise local administration account password. However, as we have set LAPS to reset the passwords every 30 days, we have a problem when we practice disaster recovery tests as we can not log on to recovered DCs prior to active directory being restored. We absolutely need to be able to log on these servers with the local administration account. Is there any way to recover the historical LAPS passwords? As it is the only way this will work is if the DR is performed within the 30 days of the setting by group policy of the current active local administrator password. Thanks
↧