Domain Accounts on Secure Host Baseline (SHB)

All,

I am using the Secure Host Baseline Server 2016 and have a question regarding the default user accounts within AD. The "Local" admin on the DC is "DoD_Admin". I have implemented LAPS on all endpoints for automatic password changes for the local accounts. However, LAPS will not work for the Domain Admin account. How do other orgs handle password changes for this account? Is it manual? How often is it changed? Is there another way to safely manage this Domain Admin account?

Brent E.