Skip to content

Commit aa941b8

Browse files
Merge pull request #2655 from LiorShapiraa/docs-editor/security-assessment-laps-1738738723
Update security-assessment-laps.md
2 parents d0eaf10 + f98428b commit aa941b8

File tree

1 file changed

+8
-13
lines changed

1 file changed

+8
-13
lines changed
Lines changed: 8 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,4 @@
11
---
2-
32
title: Microsoft LAPS usage assessment
43
description: This article provides an overview of Microsoft Defender for Identity's Microsoft LAPS usage identity security posture assessment report.
54
ms.date: 01/29/2023
@@ -12,9 +11,9 @@ ms.topic: how-to
1211

1312
Microsoft's "Local Administrator Password Solution" (LAPS) provides management of local administrator account passwords for domain-joined computers. Passwords are randomized and stored in Active Directory (AD), protected by ACLs, so only eligible users can read it or request its reset.
1413

15-
This security assessment supports [legacy Microsoft LAPS](https://www.microsoft.com/en-us/download/details.aspx?id=46899) only.
14+
This security assessment supports [legacy Microsoft LAPS](https://www.microsoft.com/en-us/download/details.aspx?id=46899) and [Windows LAPS](/windows-server/identity/laps/laps-overview).
1615

17-
## What risk does not implementing LAPS pose to an organization?
16+
## What risk does not implement LAPS pose to an organization?
1817

1918
LAPS provides a solution to the issue of using a common local account with an identical password on every computer in a domain. LAPS resolves this issue by setting a different, rotated random password for the common local administrator account on every computer in the domain.
2019

@@ -24,24 +23,20 @@ LAPS simplifies password management while helping customers implement more recom
2423

2524
1. Review the recommended action at <https://security.microsoft.com/securescore?viewid=actions> to discover which of your domains have some (or all) compatible Windows devices that aren't protected by LAPS, or that haven't had their LAPS managed password changed in the last 60 days.
2625

27-
![See which domains have devices unprotected by LAPS.](media/cas-isp-laps-1.png)
28-
26+
[![Screenshot that shows which domains have devices unprotected by LAPS.](media/cas-isp-laps-1.png)](media/cas-isp-laps-1.png#lightbox)
27+
2928
1. For domains that are partially protected, select the relevant row to view the list of devices not protected by LAPS in that domain.
3029

3130
![Select domain with devices unprotected by LAPS.](media/cas-isp-laps-2.png)
32-
33-
> [!NOTE]
34-
> If the entire domain is not protected with LAPS, you won't see the list of all the unprotected devices.
35-
36-
1. Take appropriate action on those devices by downloading, installing and configuring or troubleshooting [Microsoft LAPS](https://go.microsoft.com/fwlink/?linkid=2104282) using the documentation provided in the download.
31+
32+
1. Take appropriate action on those devices by downloading, installing, and configuring or troubleshooting [Microsoft LAPS](https://go.microsoft.com/fwlink/?linkid=2104282) or [Windows LAPS](/windows-server/identity/laps/laps-overview).
3733

3834
![Remediate devices unprotected by LAPS.](media/laps-unprotected-devices.png)
3935

4036
> [!NOTE]
41-
> While assessments are updated in near real time, scores and statuses are updated every 24 hours. While the list of impacted entities is updated within a few minutes of your implementing the recommendations, the status may still take time until it's marked as **Completed**.
42-
>
37+
> While assessments are updated in near real time, scores and statuses are updated every 24 hours. While the list of impacted entities is updated within a few minutes of your implementing the recommendations, the status may still take time until it will be marked as **Completed**.
4338
4439
## See also
4540

4641
- [Learn more about Microsoft Secure Score](/microsoft-365/security/defender/microsoft-secure-score)
47-
- [Check out the Defender for Identity forum!](<https://aka.ms/MDIcommunity>)
42+

0 commit comments

Comments
 (0)