LAPS: Retrieving Windows LAPS Passwords (ETS Internal)

Summary

Users with an admin account can request Cloud Device Administrator Privileges. This article provides detailed instructions on retrieving a LAPS password through the Microsoft Intune Admin Center.

 

How-To

Task: To retrieve a LAPS password from the Intune Admin Center

Instructions

Step 1 - With your admin account, please log into https://intune.microsoft.com

Step 2 - In the Intune admin center, navigate the menus on the left-hand side and click on Tenant Administration.

image highlight the tenant administration

 

Step 3 - Click "Microsoft Entra Privileged Identity Management".

image high the microsoft entra privileged identity management

 

Step 4 - Click "My Roles"

image highlight my roles

 

Step 5 - Choose "Activate" from the Cloud Device Administrator Role.

image that highlight the activate under my roles

 

Step 6 - Please enter a descriptive reason for requesting Cloud Device Administrator Privileges and click Activate.  You may wish to choose a shorter time to be a Cloud Device Administrator, from .5 hours to 9 hours.

Wait for the process to finish.  Your session will be refreshed for you and you will then have elevated privileges.  

page of requesting

 

Step 7 - Click "Devices" on the left pane, then choose "Windows".

image highlight devices and windows

 

Step 8 - Begin typing the device name you want to look up.  A list will populate automatically.  Choose the correct device by clicking on the name below your search.

list of windows devices

 

Step 9 - In the options on the left after the device is populated, click "Local admin password" then click "Show local administrator password".

image of local admin password and show password

 

Step 10 - Click "Show".  

highlight the show button

 

Step 11 - You should be met with the LAPS password.  Please note that this password will be valid for 24 hours, at which point it will rotate and change.

image of the LAPS password

 

Outcome

You have successfully retrieved a LAPS password for your device.

 

Need additional help?

Submit an Email Services support request with as much detail as possible, or visit the Technology Help Desk Support page to locate your local campus contact information or to submit an online technology support request.  For password issues you must call or visit the Help Desk in person.  

For assistance concerning site creation, content sharing, file synchronization, or other common SharePoint, OneDrive, Teams, or Office app activities, we recommend our Microsoft 365 Learning sites:

Learn more about the great tools our Microsoft 365 Learning sites offer!