ADMX Viewer
Microsoft.Policies.LAPS• Machine

Configure password backup directory

Use this setting to configure which directory the local admin account password is backed up to. The allowable settings are: 0=Disabled (password will not be backed up) 1=Backup the password to Azure Active Directory 2=Backup the password to Active Directory If not specified, this setting will default to 0 (Disabled). If this setting is configured to 1, and the managed device is not joined to Azure Active Directory, the local administrator password will not be managed. If this setting is configured to 2, and the managed device is not joined to Active Directory, the local administrator password will not be managed. If this setting is disabled or not configured, the local administrator password is not managed. See https://go.microsoft.com/fwlink/?linkid=2188435 for more information.

Policy Details

Policy Name
LAPS_BackupDirectory
Registry Key
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\LAPS
Supported On
At least Microsoft Windows 10 or later
Available Languages
en-us

Configuration Elements

Backup directory

Type: enum

Allowed Values
  • 0 Disabled
  • 1 Azure Active Directory
  • 2 Active Directory