Local Administrator Password Solution(LAPS)

We have all come across it. It's a problem as old as the computer itself. Ever since those first few engineers sat around the PC and said, "Hey Frank, I can'y log in. What's the password?" I am of course talking about local admin passwords. For what ever reason your local admin password will eventually leak out and when it does, it spreads quicker than rumors of free donuts in the break room. You may have combated this with a script that you run once a year that changes the local admin password. The problem with this solution is that if a machine is turned off or remote then it won't get the script run against it. You could put the script into a logon script but then your sticking a clear text version of the script onto your network somewhere. "Well, I just use GPO to deploy my passwords using Group Policy Preferences." I hear you say. This I will agree was an excellent solution until https://technet.microsoft.com/en-us/library/se...