Add capability like Microsoft LAPS
Autopilot
Merged in a post:
Accept Risk: Local Admin Password Solution (LAPS) for Windows is deployed for Entra
Joseph Monarch
We would like to see the Security Control: Local Admin Password Solution (LAPS) for Windows is deployed for Entra have the option to accept the risk. We use a different solution for LAPS. The biggest difference is it is not managed via Entra so we have the one in Entra turned off.
B
Ben Wildman
Hi Joseph, thank you for the feedback we will review.
S
Scott Thomson
This would be great! We 'could' do this with our RMM for 'broad' coverage (ie: works for onprem & cloud-only, mac & win, etc)... but our RMM would pass and store the cred in cleartext so I've avoided doing this.
Microsoft's 'cloud LAPS' through M365 is an option - but while most of our customers do use M365, some do not so its not a comprehensive solution.
The other 'nice' thing about something like this is that it could tie/extend to local account monitoring. With very very few exceptions, for our customers, a local account being created - esp. a local admin - is something we want vis on since its a rare occurrence AND we have a standardized naming scheme where exceptions would warrant investigation. This is something we already do thru RMM-based monitoring, but I'd love if it was a Huntress managed feature and data-point.
B
Bob Solimine
Local account management has been largely ignored as everyone is moving to the cloud. I have yet to meet a customer that does not want a managed local admin as an emergency authentication method to log into the OS. This would be an admin win.