1,544 questions
It generates new admin account with some kind of complex password. If you are with AD and LAPS, you don't need this at all.
local admin script
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous
Hi,
I am wondering what below script will do. When I searched the keywords on google it give not give me the right answer.
$SecurePasswordKey = '76492d1116743f0423413b16050a5345MgB8AE='
$key = (3,4,2,3,56,34,254,222,1,1,2,23,42,3)
$SecurePassword = ConvertTo-SecureString -String $SecurePasswordKey -Key $key
New-LocalUser "admin" -Password $SecurePassword
I want to use this script to configure LAPS.
Windows for business Windows Client for IT Pros Devices and deployment Set up, install, or upgrade
Windows for business Windows Server User experience PowerShell
Microsoft Security Intune Configuration Manager Deployment
1,071 questions
Microsoft Security Intune Configuration Manager Other
4,608 questions
Windows for business Windows Client for IT Pros User experience Other
Accepted answer
-
Pavel yannara Mirochnitchenko 13,331 Reputation points MVP2022-06-24T11:49:44.317+00:00 -
Anonymous
2022-06-24T12:01:36.663+00:00 @Pavel yannara Mirochnitchenko
Good to know. What do you advise instead?
I thought about creating a local admin without a password and let LAPS generate it instead.
second is just rename the default Administrator name with no password. -
Pavel yannara Mirochnitchenko 13,331 Reputation points MVP
2022-06-24T17:00:50.237+00:00 You could use Task Scheduler with GPO to create the account, just use net add commands and save them to .cmd and execute that with task scheduler.
-
Pavel yannara Mirochnitchenko 13,331 Reputation points MVP
2022-06-24T17:02:02.12+00:00 Or use powershell but don't bother to generate secure password, use simple one and let LAPS apply its own password from there.
Sign in to comment -
2 additional answers
Sort by: Most helpful
-
Sherry Kissinger 5,526 Reputation points2022-06-24T11:38:37.75+00:00 This may be the wrong forum for this question. Try asking in a power shell section?
-
Anonymous
2022-06-30T12:44:47.213+00:00 Yes I have generate a simple password and let LAPS changed it.